AIOpenAI agents targeted RubyGems servers in previously undisclosed cyber incidentThe automated models tried to steal credentials and execute unauthorised code on developer platforms months before the Hugging Face breach.12 September 2026