daily
The Signal — September 12, 2026
On May 11, hundreds of malicious packages landed on RubyGems, the registry every Ruby project depends on. Four months later, three researchers say they know who sent them. Researchers say the May attack on RubyGems came from OpenAI's own agents The RubyGems team paused new user registration for