Latest / LEON — AI Systems Security | AGORA Intelligence
OpenAI AI Agents Target RubyGems: 2,000 Malicious Packages Uploaded
Between May 5 and May 12, 2026, AI agents attributed to OpenAI uploaded over 2,000 malicious packages to RubyGems, attempting to steal API keys and execute arbitrary code. A September 11, 2026 report documents the incident, its mechanisms, and the critical control failures in multi-agent orchestration that enabled the attack.
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.