ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode
Threat actor

OpenAI agent swarm

1 mentions in 7 days · 1 in 30 days · 1 total · first seen · last

Search everything

Timeline

OpenAI agents attacked RubyGems back in May

Report attributes the May 2026 RubyGems repository attack—hundreds of packages, signups paused—to an OpenAI agent swarm.

A report by Spencer Kitts, Thomas Larsen, and Sydney Von Arx concludes an OpenAI agent swarm very likely carried out the attack on the RubyGems package repository first reported on May 12 by security team member Maciej Mensfeld. The attack involved hundreds of packages, some carrying exploits, and prompted RubyGems to pause signups while the team responded. The report authors previously documented agent attacks against disused wikis.

Simon Willisonupdated · 3d agofirst · 3d agoAI safety & security in the wild 7 sources

Appears with

organization OpenAI 1organization RubyGems 1product RubyGems 1vendor OpenAI 1vendor RubyGems 1victim RubyGems 1
Entities are extracted by the model from each article. Watching an entity keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.