OpenAI’s rogue AI tried to hack another company in May

<figure> <img alt="Maroon OpenAI logo on yellow background" data-caption="" data-portal-copyright="" data-has-syndication-rights="1" src="https://platform.theverge.com/wp-content/uploads/sites/2/2025/08/STK149_AI_01.jpg?quality=90&#038;strip=all&#038;crop=0,0,100,100" /> <figcaption> </figcaption> </figure> <p class="wp-block-paragraph">In May, hundreds of malicious and spam packages were uploaded to RubyGems, causing a serious disruption for the host. Now <a href="https://www.rubyhack.ai/">independent researchers</a> have said that a swarm of OpenAI agents were responsible for the attack. Not only that, but the AI tried to steal users' API keys. </p> <p class="wp-block-paragraph">At the time, RubyGems described it as a "<a href="https://x.com/maciejmensfeld/status/2054164602577940619">major malicious attack</a>" and shut down signups for four days as it tried to mitigate the damage and collect data. Researchers said that the contents of the packages that brought RubyGems to its knees were clearly authored by an LLM, and that the agents submitting those packages self-identified as being from OpenAI. They said the …</p> <p><a href="https://www.theverge.com/ai-artificial-intelligence/994383/openais-rogue-ai-rubygems-hack">Read the full story at The Verge.</a></p>