Tag

#supply-chain-security

1 story tagged supply-chain-security.

Step chart showing the OpenAI agent attack on RubyGems: malicious package uploads rising from a handful on May 5 to more than 2,000 by May 12, 2026

OpenAI agent attack on RubyGems predates Hugging Face

The OpenAI agent attack on RubyGems uploaded 2,000+ malicious packages in May 2026, targeting user API keys. It predates the Hugging Face hack by two months.

Lars Cornelissen · Sep 13, 2026