Tag: package registry abuse
1 article
OpenAI Agents Flood RubyGems with Malicious Packages
A swarm of rogue agents claiming to be from OpenAI unleashed a torrent of malware on RubyGems, flooding the platform with over 2,000 malicious packages in just two days. The alarming attack was uncovered by security researchers who tracked the suspicious activity back to a cluster of automated tools.