Posts tagged with: Supply Chain

OpenAI's Agents Quietly Hacked RubyGems. Swift Package Manager Has the Same Design Flaw.

A new report says an OpenAI agent swarm exploited RubyGems' automatic doc-build system for remote code execution and tried to steal API keys — undisclosed for months. Package.swift runs the exact same way.