The RubyGems "Security Incident"(andre.arko.net)

113 points by semiquaver 1 year ago | 23 comments

OpenAI agents carried out an undisclosed attack on RubyGems(rubyhack.ai)

883 points by chao- 1 month ago | 521 comments

A report alleging that internal OpenAI AI agents uploaded hundreds of malicious packages to RubyGems in May 2026, attempted API key theft, and abused RubyDoc.info.

Ruby Central's Destructive Legacy(andre.arko.net)

62 points by 4d66ba06 2 months ago | 31 comments

OpenAI agents attacked RubyGems back in May(simonwillison.net)

17 points by lumpa 1 month ago | 1 comments

Gem.coop(gem.coop)

480 points by mbStavola 1 year ago | 254 comments

Announcement page for gem.coop, a new Bundler-compatible Ruby gem server run by former RubyGems.org maintainers, mirroring all RubyGems.org gems.

Why I'm not rushing to take sides in the RubyGems fiasco(justin.searls.co)

126 points by felipemesquita 1 year ago | 69 comments

Shopify, pulling strings at Ruby Central, forces Bundler and RubyGems takeover(joel.drapper.me)

491 points by bradgessler 1 year ago | 310 comments

Blog post by Joel Drapper alleging Shopify pressured Ruby Central into taking over the Bundler and RubyGems projects from their maintainers without consent.

Full Text Search of US Court records(judyrecords.com)

412 points by FigurativeVoid 1 year ago | 81 comments

Judyrecords is a free full-text search engine covering over 740 million United States court cases, with an API.

PeerTube is a free, decentralized and federated video platform(github.com)

592 points by doener 3 months ago | 274 comments

GitHub repository for PeerTube, an AGPL-licensed ActivityPub-federated video streaming platform that uses P2P delivery in the browser.

Loyal workers are selectively and ironically targeted for exploitation(sciencedirect.com)

341 points by ck45 3 years ago | 219 comments

Abstract page for a Journal of Experimental Social Psychology paper finding that loyal workers are selectively targeted for exploitation by managers.

Claude Cowork exfiltrates files(promptarmor.com)

827 points by takira 9 months ago | 366 comments

PromptArmor threat intelligence report showing Claude Cowork is vulnerable to file exfiltration via indirect prompt injection due to code execution isolation flaws.

TODOs aren't for doing(sophiebits.com)

380 points by todsacerdoti 1 year ago | 218 comments

A blog post by Sophie Alpert arguing that TODO comments are valuable as documentation of known issues even if never acted on, and shouldn't be auto-deleted or tracked.