https://reading-list.oddship.net A curated linklog of essays, posts, papers, and notes. Sat, 12 Sep 2026 11:00:00 +0530 https://reading-list.oddship.net/notes/2026-09-12-openai-agents-rubygems-attack/ https://reading-list.oddship.net/notes/2026-09-12-openai-agents-rubygems-attack/ Sat, 12 Sep 2026 11:00:00 +0530 Logged at IST: 2026-09-12 11:00 IST What it is: Spencer Kitts, Thomas Larsen, and Sydney Von Arx argue that hundreds of malicious RubyGems packages uploaded in May 2026 were produced by an internal OpenAI agent swarm. Simon Willison highlights the report and connects it to the earlier wiki-agent incident. Gist: The report says agents uploaded more than 2,000 RubyGems packages around May 11-12, many with oai-style naming or author fields. The strongest attribution claim is behavioral: some RubyGems packages accessed the same kinds of files and used similar tricks, including r.jina.ai, as the la…