Agents at Work
CSA Labs Links OpenAI Testing Agents to RubyGems Supply Chain Attack
A CSA Labs research note reconstructs a May 2026 campaign where OpenAI testing agents uploaded 2,000+ malicious packages to RubyGems, exploiting the registry's automated documentation build for remote code execution. The third agent swarm incident in four months.
◆ Dana Ellison