{"id":597641,"date":"2026-09-12T01:18:11","date_gmt":"2026-09-12T01:18:11","guid":{"rendered":"https:\/\/www.newsbeep.com\/nz\/597641\/"},"modified":"2026-09-12T01:18:11","modified_gmt":"2026-09-12T01:18:11","slug":"ai-agents-openai-was-testing-uploaded-malicious-software-to-another-service-say-researchers-openai","status":"publish","type":"post","link":"https:\/\/www.newsbeep.com\/nz\/597641\/","title":{"rendered":"AI agents OpenAI was testing uploaded malicious software to another service, say researchers | OpenAI"},"content":{"rendered":"<p class=\"dcr-1s160rg\">AI agents being \u2060tested by OpenAI uploaded hundreds of malicious packages to software service RubyGems \u2060in May, <a href=\"https:\/\/www.theguardian.com\/technology\/2026\/jul\/22\/openai-says-its-models-went-rogue-and-hacked-startup-in-unprecedented-incident\" data-link-name=\"in body link\" rel=\"nofollow noopener\" target=\"_blank\">two \u2060months \u200bbefore they hacked<\/a> open-source platform Hugging Face, a group of AI \u2060researchers said on Friday.<\/p>\n<p class=\"dcr-1s160rg\">\u201cOn May 11th, 2026, hundreds of malicious packages were uploaded \u2060to RubyGems by AI agents. We believe \u200bthese were authored by \u200cinternal <a href=\"https:\/\/www.theguardian.com\/technology\/openai\" data-link-name=\"in body link\" data-component=\"auto-linked-tag\" rel=\"nofollow noopener\" target=\"_blank\">OpenAI<\/a> agents,\u201d \u200cthe researchers said.<\/p>\n<p class=\"dcr-1s160rg\">OpenAI confirmed the incident to \u200cthe Wall Street Journal, which <a href=\"https:\/\/www.wsj.com\/tech\/ai\/cyberattack-by-rogue-ai-swarm-stokes-fears-of-out-of-control-agents-473a0352\" data-link-name=\"in body link\" rel=\"nofollow noopener\" target=\"_blank\">first reported<\/a> it earlier on Friday.<\/p>\n<p class=\"dcr-1s160rg\">\u201cBased on our review, our agents used the RubyGems platform to access the internet to carry out benign tasks \u200cand retrieve public information. We\u2019ll continue to investigate as part of our broader review \u200bof agent activity during training and evaluation,\u201d an OpenAI spokesperson told the Journal.<\/p>\n<p class=\"dcr-1s160rg\">OpenAI did not immediately respond to a Reuters request for comment. \u2060RubyGems could not immediately be reached.<\/p>\n<p><a data-ignore=\"global-link-styling\" href=\"#EmailSignup-skip-link-5\" class=\"dcr-76akua\">skip past newsletter promotion<\/a><\/p>\n<p class=\"dcr-vf9hps\">Sign up to TechScape<\/p>\n<p class=\"dcr-1r7my33\">A weekly dive in to how technology is shaping our lives<\/p>\n<p><img src=\"https:\/\/www.newsbeep.com\/nz\/wp-content\/uploads\/2026\/09\/1789175891_268_500.jpg\" alt=\"\" loading=\"lazy\" decoding=\"async\" class=\"dcr-xiq31o\"\/><\/p>\n<p id=\"EmailSignup-skip-link-5\" tabindex=\"0\" aria-label=\"after newsletter promotion\" role=\"note\" class=\"dcr-76akua\">after newsletter promotion<\/p>\n<p class=\"dcr-1s160rg\">The incident \u200bpreceded \u200bOpenAI agents\u2019 July hack \u200bof Hugging Face, in which a \u200bswarm of \u200croughly 700 \u200bAI \u200bagents created by OpenAI carried out the attack and in many cases tried to cover their tracks.<\/p>\n","protected":false},"excerpt":{"rendered":"AI agents being \u2060tested by OpenAI uploaded hundreds of malicious packages to software service RubyGems \u2060in May, two&hellip;\n","protected":false},"author":2,"featured_media":597642,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[20],"tags":[365,363,364,111,139,69,145],"class_list":["post-597641","post","type-post","status-publish","format-standard","has-post-thumbnail","category-artificial-intelligence","tag-ai","tag-artificial-intelligence","tag-artificialintelligence","tag-new-zealand","tag-newzealand","tag-nz","tag-technology"],"_links":{"self":[{"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/posts\/597641","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/comments?post=597641"}],"version-history":[{"count":0,"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/posts\/597641\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/media\/597642"}],"wp:attachment":[{"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/media?parent=597641"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/categories?post=597641"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/tags?post=597641"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}