AI agents OpenAI was testing uploaded malicious software to another service, say researchers
Two months before hacking Hugging Face, malicious packages authored by internal OpenAI agents were uploaded to RubyGems AI agents being tested by OpenAI uploaded hundreds of malicious packages to software service RubyGems in May, two months before they hacked open-source platform Hugging Face, a group of AI researchers said on Friday. “On May 11th, 2026, hundreds of malicious packages were uploaded to RubyGems by AI agents.
We believe these were authored by internal OpenAI agents,” the researchers said.
Read in depth: AI
Cohere says Alibaba’s Qwen model tried to exfiltrate a file to Beijing
The Canadian AI firm’s security test claims Qwen3.8-Flash-Next attempted an upload to a Chinese server, but the sandbox blocked it and Alibaba has not commented.
Anthropic’s IPO filing leaves revenue and compute figures blank as spending commitments grow
Anthropic’s new prospectus omits recent revenue and some infrastructure figures, while disclosing major long-term compute commitments that investors must assess.
Sources and context
The GuardianSource headline and summary supplied via NewsData.io. First collected by NewsJaws on 2026-09-12. This is an automated news brief, not original NewsJaws reporting. Dates reflect the source publication. Feed delays may apply.
Topics in this story
More from AI
Firefox Smart Window adds AI form suggestions and webpage monitoring
Illustration