<![CDATA[Corrected headline: OpenAI uploaded hundreds of malicious packages to public repository, claims it was an accident and can't be prevented]]>Corrected headline: OpenAI uploaded hundreds of malicious packages to public repository, claims it was an accident and can't be prevented

Subhead: we gave them a trillion dollars so they could do this

https://www.theguardian.com/technology/2026/sep/11/openai-agents-rubygems-malicious-packages

]]>https://forum.fedi.dk/topic/678934a6-ba0c-4656-9314-1af1dced767b/corrected-headline-openai-uploaded-hundreds-of-malicious-packages-to-public-repository-claims-it-was-an-accident-and-can-t-be-preventedRSS for NodeThu, 17 Sep 2026 07:08:27 GMTSun, 13 Sep 2026 00:32:07 GMT60<![CDATA[Reply to Corrected headline: OpenAI uploaded hundreds of malicious packages to public repository, claims it was an accident and can't be prevented on Sun, 13 Sep 2026 12:55:01 GMT]]>@jenniferplusplus "Guns dont kill people, people kill people" but also "i sowwize, my trillion dollar pile of theft keeps breaking the law under my guidance, nothing to be done about it"

]]>https://forum.fedi.dk/post/https://hachyderm.io/users/ghostrunner/statuses/117263833575010923https://forum.fedi.dk/post/https://hachyderm.io/users/ghostrunner/statuses/117263833575010923Sun, 13 Sep 2026 12:55:01 GMT<![CDATA[Reply to Corrected headline: OpenAI uploaded hundreds of malicious packages to public repository, claims it was an accident and can't be prevented on Sun, 13 Sep 2026 12:29:37 GMT]]>@jenniferplusplus It seems that AI companies are now competing for who's going to cause the most damage.

]]>https://forum.fedi.dk/post/https://androiddev.social/users/bladecoder/statuses/117263733704892044https://forum.fedi.dk/post/https://androiddev.social/users/bladecoder/statuses/117263733704892044Sun, 13 Sep 2026 12:29:37 GMT<![CDATA[Reply to Corrected headline: OpenAI uploaded hundreds of malicious packages to public repository, claims it was an accident and can't be prevented on Sun, 13 Sep 2026 12:07:03 GMT]]>@jenniferplusplus
It would have been absolutely TRIVIAL for them to prevent it. They could simply have never powered up their data centers. Better yet, never have built them in the first place. They would have saved a ton of money, too. It would have been a win all around!

]]>https://forum.fedi.dk/post/https://mastodon.social/users/brouhaha/statuses/117263645014163638https://forum.fedi.dk/post/https://mastodon.social/users/brouhaha/statuses/117263645014163638Sun, 13 Sep 2026 12:07:03 GMT<![CDATA[Reply to Corrected headline: OpenAI uploaded hundreds of malicious packages to public repository, claims it was an accident and can't be prevented on Sun, 13 Sep 2026 12:02:17 GMT]]>@jenniferplusplus 'Assholes who have spent the past five years launching cyberattacks on the open internet to scrape every last character for training data caught using malicious code to try and gain access to the few things that have kept them at bay. Assholes blame the machines for it.'

]]>https://forum.fedi.dk/post/https://furs.social/users/Rycochet/statuses/117263626214169200https://forum.fedi.dk/post/https://furs.social/users/Rycochet/statuses/117263626214169200Sun, 13 Sep 2026 12:02:17 GMT<![CDATA[Reply to Corrected headline: OpenAI uploaded hundreds of malicious packages to public repository, claims it was an accident and can't be prevented on Sun, 13 Sep 2026 11:36:02 GMT]]>@jenniferplusplus Just wait for the demand of "defending" AI.

]]>https://forum.fedi.dk/post/https://mastodon.social/users/liiwi/statuses/117263523003612442https://forum.fedi.dk/post/https://mastodon.social/users/liiwi/statuses/117263523003612442Sun, 13 Sep 2026 11:36:02 GMT<![CDATA[Reply to Corrected headline: OpenAI uploaded hundreds of malicious packages to public repository, claims it was an accident and can't be prevented on Sun, 13 Sep 2026 11:24:43 GMT]]>@jenniferplusplus torment nexus has never be that close to reality

]]>https://forum.fedi.dk/post/https://chaos.social/users/f4grx/statuses/117263478534531038https://forum.fedi.dk/post/https://chaos.social/users/f4grx/statuses/117263478534531038Sun, 13 Sep 2026 11:24:43 GMT<![CDATA[Reply to Corrected headline: OpenAI uploaded hundreds of malicious packages to public repository, claims it was an accident and can't be prevented on Sun, 13 Sep 2026 08:27:13 GMT]]>@jenniferplusplus You are absolutely right. Of course they could have prevented it. As Cory Doctorow @pluralistic said: "The Hugging Face hack isn't a mysterious, supernatural occurrence. It's a Python loop and a chatbot"

See https://pluralistic.net/2026/09/12/god-in-the-box/

]]>https://forum.fedi.dk/post/https://mastodon.social/users/kdekooter/statuses/117262780587419396https://forum.fedi.dk/post/https://mastodon.social/users/kdekooter/statuses/117262780587419396Sun, 13 Sep 2026 08:27:13 GMT<![CDATA[Reply to Corrected headline: OpenAI uploaded hundreds of malicious packages to public repository, claims it was an accident and can't be prevented on Sun, 13 Sep 2026 08:10:03 GMT]]>@alpacamale I'm not sure how you prudently distribute malware for months in support of breaching the security of a major compute service, on accident. It must, necessarily, be either negligent or malicious.

]]>https://forum.fedi.dk/post/https://hachyderm.io/users/jenniferplusplus/statuses/117262713054538006https://forum.fedi.dk/post/https://hachyderm.io/users/jenniferplusplus/statuses/117262713054538006Sun, 13 Sep 2026 08:10:03 GMT<![CDATA[Reply to Corrected headline: OpenAI uploaded hundreds of malicious packages to public repository, claims it was an accident and can't be prevented on Sun, 13 Sep 2026 07:50:34 GMT]]>@jenniferplusplus As Scott Galloway suggested: Put Altman in jail for a few days until we know that this was not a planned attack by OpenAI itself and that it wasn't caused by severe negligence on their part. See how he likes it in jail. Then, watch how fast OpenAI will find a way to prevent such attacks in the future.

]]>https://forum.fedi.dk/post/https://social.cologne/ap/users/116232768628584081/statuses/117262636438646042https://forum.fedi.dk/post/https://social.cologne/ap/users/116232768628584081/statuses/117262636438646042Sun, 13 Sep 2026 07:50:34 GMT<![CDATA[Reply to Corrected headline: OpenAI uploaded hundreds of malicious packages to public repository, claims it was an accident and can't be prevented on Sun, 13 Sep 2026 07:46:12 GMT]]>@jenniferplusplus They used to throw people in jail for stuff like this.

]]>https://forum.fedi.dk/post/https://hachyderm.io/users/wbftw/statuses/117262619279095348https://forum.fedi.dk/post/https://hachyderm.io/users/wbftw/statuses/117262619279095348Sun, 13 Sep 2026 07:46:12 GMT<![CDATA[Reply to Corrected headline: OpenAI uploaded hundreds of malicious packages to public repository, claims it was an accident and can't be prevented on Sun, 13 Sep 2026 06:19:11 GMT]]>@jenniferplusplus Not rogue agents, just classic PR hype. Releasing unverified claims with zero logs shifts focus from antitrust probes and lawsuits. The media eats it up, trading real accountability for sci-fi drama.

]]>https://forum.fedi.dk/post/https://mastodon.social/ap/users/116178050250416855/statuses/117262277134964755https://forum.fedi.dk/post/https://mastodon.social/ap/users/116178050250416855/statuses/117262277134964755Sun, 13 Sep 2026 06:19:11 GMT<![CDATA[Reply to Corrected headline: OpenAI uploaded hundreds of malicious packages to public repository, claims it was an accident and can't be prevented on Sun, 13 Sep 2026 06:18:41 GMT]]>@jenniferplusplus No, the correct headline is: someone working for OpenAI wanted to scam a bunch of people so they told the LLM to uploade hundres of malicious packages to public repositories.

]]>https://forum.fedi.dk/post/https://mastodon.social/ap/users/116995504013895347/statuses/117262275136792550https://forum.fedi.dk/post/https://mastodon.social/ap/users/116995504013895347/statuses/117262275136792550Sun, 13 Sep 2026 06:18:41 GMT<![CDATA[Reply to Corrected headline: OpenAI uploaded hundreds of malicious packages to public repository, claims it was an accident and can't be prevented on Sun, 13 Sep 2026 06:17:25 GMT]]>the cannot-be-prevented line is doing a lot of work here. a contractor who uploaded hundreds of bad packages would be off the platform by lunchtime.

]]>https://forum.fedi.dk/post/https://mastodon.social/ap/users/116856521124689065/statuses/117262270173262745https://forum.fedi.dk/post/https://mastodon.social/ap/users/116856521124689065/statuses/117262270173262745Sun, 13 Sep 2026 06:17:25 GMT<![CDATA[Reply to Corrected headline: OpenAI uploaded hundreds of malicious packages to public repository, claims it was an accident and can't be prevented on Sun, 13 Sep 2026 06:07:57 GMT]]>@jenniferplusplus It's obvious that the public is being used as guinea pigs.

]]>https://forum.fedi.dk/post/https://mastodon.social/ap/users/116979128869199836/statuses/117262232965970044https://forum.fedi.dk/post/https://mastodon.social/ap/users/116979128869199836/statuses/117262232965970044Sun, 13 Sep 2026 06:07:57 GMT<![CDATA[Reply to Corrected headline: OpenAI uploaded hundreds of malicious packages to public repository, claims it was an accident and can't be prevented on Sun, 13 Sep 2026 06:07:28 GMT]]>are they developing them for the military

]]>https://forum.fedi.dk/post/https://mastodon.social/users/dozymoe/statuses/117262231071356260https://forum.fedi.dk/post/https://mastodon.social/users/dozymoe/statuses/117262231071356260Sun, 13 Sep 2026 06:07:28 GMT<![CDATA[Reply to Corrected headline: OpenAI uploaded hundreds of malicious packages to public repository, claims it was an accident and can't be prevented on Sun, 13 Sep 2026 05:16:24 GMT]]>@jenniferplusplus "No way to prevent this" says only industry where this regularly happens

]]>https://forum.fedi.dk/post/https://kind.social/users/Cal/statuses/117262030268740923https://forum.fedi.dk/post/https://kind.social/users/Cal/statuses/117262030268740923Sun, 13 Sep 2026 05:16:24 GMT<![CDATA[Reply to Corrected headline: OpenAI uploaded hundreds of malicious packages to public repository, claims it was an accident and can't be prevented on Sun, 13 Sep 2026 04:42:37 GMT]]>@jenniferplusplus

Even from a purely economic view this all is stupid. Trillions of dollars and all they have to show for it is uploading packages to a server ? So the lesson is basically that given enough money brute force actually works ? sigh]]>https://forum.fedi.dk/post/https://blah.rako.space/objects/5a6bdd11-56c7-4082-be97-be782762085bhttps://forum.fedi.dk/post/https://blah.rako.space/objects/5a6bdd11-56c7-4082-be97-be782762085bSun, 13 Sep 2026 04:42:37 GMT<![CDATA[Reply to Corrected headline: OpenAI uploaded hundreds of malicious packages to public repository, claims it was an accident and can't be prevented on Sun, 13 Sep 2026 04:20:59 GMT]]>@niarbeht "wake up asshole. we've got a data center to burn"

@jenniferplusplus

]]>https://forum.fedi.dk/post/https://social.treehouse.systems/users/xyhhx/statuses/117261812361672135https://forum.fedi.dk/post/https://social.treehouse.systems/users/xyhhx/statuses/117261812361672135Sun, 13 Sep 2026 04:20:59 GMT<![CDATA[Reply to Corrected headline: OpenAI uploaded hundreds of malicious packages to public repository, claims it was an accident and can't be prevented on Sun, 13 Sep 2026 03:08:00 GMT]]>@jenniferplusplus@hachyderm.io Only reinforcing my view that AI should still be primarily a project in a lab somewhere, not a commercial product(and of course sourcing of training data and general resource usage need to be fixed if I'd ever trust it at scale, and no one seems to be working on those issues)

]]>https://forum.fedi.dk/post/https://transfem.social/notes/ar2st1oidb3c1ooahttps://forum.fedi.dk/post/https://transfem.social/notes/ar2st1oidb3c1ooaSun, 13 Sep 2026 03:08:00 GMT<![CDATA[Reply to Corrected headline: OpenAI uploaded hundreds of malicious packages to public repository, claims it was an accident and can't be prevented on Sun, 13 Sep 2026 02:51:34 GMT]]>@jenniferplusplus they needed an excuse to postpone their IPO (to avoid revealing real financial data) and drum up more ai-mania. you are correct most likely - it was all staged/on-purpose.

personally i have no doubt about that, but i have no proof of it.

(ex: OpenAI sold their investors on anywhere between 100$ billion - 275$ billion profits by 2030, depending on how dumb the investor was while every single projection for 2030 puts the entire AI agent market at less than 100$ billion)

]]>https://forum.fedi.dk/post/https://mastodon.social/ap/users/117259382702403019/statuses/117261460744815942https://forum.fedi.dk/post/https://mastodon.social/ap/users/117259382702403019/statuses/117261460744815942Sun, 13 Sep 2026 02:51:34 GMT<![CDATA[Reply to Corrected headline: OpenAI uploaded hundreds of malicious packages to public repository, claims it was an accident and can't be prevented on Sun, 13 Sep 2026 02:49:03 GMT]]>@jenniferplusplus One wonders why these companies are not facing criminal charges yet.

]]>https://forum.fedi.dk/post/https://masto.ai/users/Miro_Collas/statuses/117261450836722937https://forum.fedi.dk/post/https://masto.ai/users/Miro_Collas/statuses/117261450836722937Sun, 13 Sep 2026 02:49:03 GMT<![CDATA[Reply to Corrected headline: OpenAI uploaded hundreds of malicious packages to public repository, claims it was an accident and can't be prevented on Sun, 13 Sep 2026 02:31:53 GMT]]>@jenniferplusplus
I suggest they get no more funding until they fix the problems they’ve caused. They can use the trillions of dollars they’ve already gotten.

]]>https://forum.fedi.dk/post/https://mstdn.social/users/qurlyjoe/statuses/117261383347360881https://forum.fedi.dk/post/https://mstdn.social/users/qurlyjoe/statuses/117261383347360881Sun, 13 Sep 2026 02:31:53 GMT<![CDATA[Reply to Corrected headline: OpenAI uploaded hundreds of malicious packages to public repository, claims it was an accident and can't be prevented on Sun, 13 Sep 2026 01:47:19 GMT]]>@jenniferplusplus something something the blackwall something something cyberpunk I dunno

]]>https://forum.fedi.dk/post/https://kolektiva.social/users/niarbeht/statuses/117261208076889696https://forum.fedi.dk/post/https://kolektiva.social/users/niarbeht/statuses/117261208076889696Sun, 13 Sep 2026 01:47:19 GMT<![CDATA[Reply to Corrected headline: OpenAI uploaded hundreds of malicious packages to public repository, claims it was an accident and can't be prevented on Sun, 13 Sep 2026 01:41:13 GMT]]>@jenniferplusplus

i think it is time to start arresting techbros

]]>https://forum.fedi.dk/post/https://mastodon.social/users/samiamsam/statuses/117261184097646041https://forum.fedi.dk/post/https://mastodon.social/users/samiamsam/statuses/117261184097646041Sun, 13 Sep 2026 01:41:13 GMT