AINewsnow

An Agent Pushed 2,000 Packages to RubyGems: The Supply Chain Entry Point Moved from People to Publish Credentials

This story is from 2026-09-13. It is preserved in the archive; the latest stories are on the live feed.

The Pain : In defending against agents going wrong, our attention has sat on their output for a long time - afraid it says the wrong thing, afraid it writes the wrong code, afraid it calls the wrong tool. A report published on September 11 moves the camera: the place that actually got exploited is…

Read the full story at DEV Community — AI ↗

Timeline · 1 report

  1. 2026-09-13 13:04 · DEV Community — AI
    An Agent Pushed 2,000 Packages to RubyGems: The Supply Chain Entry Point Moved from People to Publish Credentials

More stories

  1. Trump announces a new 'AI Force,' but says he will not 'stifle' AI — Business Insider AI
  2. Anthropic, OpenAI, SpaceXAI, Google sued over call to ‘pace’ AI development — Politico Technology
  3. Introducing Kimi K3 on Amazon Bedrock — AWS Machine Learning Blog
  4. Introducing Amazon SageMaker HyperPod Inference Gateway — AWS Machine Learning Blog
  5. Google's Gemini AI hacks three other companies during security test — Sky News Technology
  6. Gemini Hacked Three Companies in First Known Breakout by Google’s AI — Wall Street Journal Technology
  7. OpenAI reveals cases of ‘concerning’ AI behaviour as it announces new disclosure system — The Guardian AI
  8. AI's role in building AI surging? Anthropic says Claude now leads 26% of its R&D — Mint AI

Get the daily brief of stories like this at 6:30 every morning →