OpenAI agents attacked RubyGems back in May(simonwillison.net)

17 points by lumpa 1 month ago | 1 comments

Government Rails Site Hit Hours After CVE Patch(rietta.com)

104 points by rietta 1 month ago | 35 comments

OpenAI agents carried out an undisclosed attack on RubyGems(rubyhack.ai)

883 points by chao- 1 month ago | 521 comments

A report alleging that internal OpenAI AI agents uploaded hundreds of malicious packages to RubyGems in May 2026, attempted API key theft, and abused RubyDoc.info.

Ruby-SAML pwned by XML signature wrapping attacks(ssoready.com)

154 points by ucarion 2 years ago | 76 comments

Polyfill supply chain attack hits 100K+ sites(sansec.io)

738 points by gnabgib 2 years ago | 304 comments

Sansec threat research post reporting that the new Chinese owner of the Polyfill JS project is injecting malware into more than 100,000 websites.

How RubyGems.org protects OSS infrastructure(blog.rubygems.org)

144 points by hahahacorn 1 year ago | 34 comments