{
  "schemaVersion": "bitshovel-editorial-review-v1",
  "id": "rubygems-title-attribution-20260912",
  "signalId": "feed-story-rubyhack-ai-2e92ab42c193cf46",
  "originalUrl": "https://www.rubyhack.ai/",
  "kind": "editorial-correction",
  "reviewedAt": "2026-09-12T08:51:30.021Z",
  "before": {
    "id": "feed-story-rubyhack-ai-2e92ab42c193cf46",
    "state": "new",
    "lane": "workflow",
    "publishedAt": "2026-09-11T23:41:50.000Z",
    "observedAt": "2026-09-12T01:15:44.753Z",
    "originalUrl": "https://www.rubyhack.ai/",
    "relatedSources": [
      {
        "label": {
          "zh": "AIHOT 精选",
          "en": "AIHOT featured"
        },
        "url": "https://aihot.news/items/cmtxnd7fw06wcroi31psxg2c6"
      },
      {
        "label": {
          "zh": "IT之家",
          "en": "ITHome"
        },
        "url": "https://www.ithome.com/1/001/492.htm"
      },
      {
        "label": {
          "zh": "Simon Willison 博客",
          "en": "Simon Willison's weblog"
        },
        "url": "https://simonwillison.net/2026/Sep/12/openai-agents-rubygems/"
      }
    ],
    "source": {
      "zh": "Lobsters 技术社区热榜、AIHOT 精选、IT之家",
      "en": "Lobsters front page, AIHOT featured, ITHome"
    },
    "title": {
      "zh": "OpenAI 智能体集群对 RubyGems 发动未公开攻击:作者团队的详细取证分析",
      "en": "OpenAI agents carried out an undisclosed attack on RubyGems"
    },
    "summary": {
      "zh": "可见来源把这件事概括为“OpenAI 智能体集群对 RubyGems 发动未公开攻击:作者团队的详细取证分析”；具体经过、证据和限制仍需回到原文核实。",
      "en": "From the linked page's own abstract: On May 11th, 2026, hundreds of malicious packages were uploaded to RubyGems by AI agents performing web-lookup tasks with significant overlap with the German Wiki Incident."
    },
    "why": {
      "zh": "相关报道与讨论可从来源链接继续阅读。多处提及可能引用相同材料，不代表彼此独立证实。",
      "en": "Follow the source links for related reports and discussion. Several mentions may rely on the same material; they do not establish independent evidence."
    },
    "caveat": {
      "zh": "相关来源可能引用相同材料。这是一份讨论快照，回帖不能证明实际效果。原文中的说法保留其来源归属，收录不是独立验证，也不能证明实际效果。",
      "en": "Related sources may rely on the same material. This is a discussion snapshot. Discussion is not proof of practical outcomes. Claims remain attributed to their sources. Collection is not proof of the claims or practical outcomes."
    },
    "timeline": [
      {
        "date": {
          "zh": "9 月 12 日",
          "en": "Sep 12"
        },
        "kind": "record-added",
        "datetime": "2026-09-12T01:15:44.753Z",
        "summary": {
          "zh": "在 Lobsters 技术社区热榜、AIHOT 精选、IT之家 发现这篇资料。",
          "en": "Found this reading link via Lobsters front page, AIHOT featured, ITHome."
        },
        "source": {
          "zh": "Lobsters 技术社区热榜、AIHOT 精选、IT之家",
          "en": "Lobsters front page, AIHOT featured, ITHome"
        }
      },
      {
        "date": {
          "zh": "9 月 12 日",
          "en": "Sep 12"
        },
        "datetime": "2026-09-12T00:42:25.000Z",
        "discoveredAt": "2026-09-12T06:28:47.079Z",
        "kind": "corroboration-added",
        "summary": {
          "zh": "新增同题佐证：Simon Willison 博客 收录同一故事（标题匹配）；此处记录报道日期。",
          "en": "Corroboration added: Simon Willison's weblog carried the same story (title match); dated to the report's publication."
        },
        "source": {
          "zh": "Simon Willison 博客",
          "en": "Simon Willison's weblog"
        }
      }
    ],
    "followTarget": {
      "id": "page:rubyhack-ai-2e92ab42c193cf46",
      "label": {
        "zh": "OpenAI agents carried out an undisclosed attack on RubyGems",
        "en": "OpenAI agents carried out an undisclosed attack on RubyGems"
      },
      "scope": {
        "zh": "原文页面的后续实质变化：内容修订、数据更新或官方回应",
        "en": "Material follow-up changes on the original page: revisions, data updates, or an official response"
      },
      "url": "https://www.rubyhack.ai/",
      "updateMode": "editorial-watch"
    },
    "ingestion": {
      "mode": "editorial",
      "adapter": "syndication-corroborated",
      "evidenceClass": "discussion-signal",
      "editorialReadiness": "source-note",
      "admittedAt": "2026-09-12T06:29:32.376Z"
    },
    "banner": {
      "url": "/card-art/feed-story-rubyhack-ai-2e92ab42c193cf46-official-a09b6fb1397389d4.png",
      "credit": "Original source image · www.rubyhack.ai",
      "license": "© www.rubyhack.ai · editorial use with attribution"
    }
  },
  "after": {
    "title": {
      "zh": "RubyGems 恶意发包事件：研究者指向 OpenAI 智能体",
      "en": "RubyGems package abuse: researchers attribute it to OpenAI agents"
    }
  },
  "note": {
    "zh": "原标题把研究者对 OpenAI 智能体的归因写成了确定事实，现补明归因主体。RubyGems 官方确认恶意批量发包与处置，但表示无法判定包是否由 AI 智能体创建或发布。",
    "en": "The previous headline presented the researchers’ attribution to OpenAI agents as established fact. It now names the attribution as a research claim. RubyGems confirms the package abuse and response but says it cannot determine whether AI agents created or published the packages."
  },
  "withdrawnSources": [],
  "withdrawnTimeline": [],
  "evidence": [
    {
      "type": "retained-official-page",
      "label": {
        "zh": "RubyGems 官方事件更新",
        "en": "RubyGems official incident update"
      },
      "url": "https://blog.rubygems.org/2026/09/11/update-may-spam-publishing-campaign.html",
      "fetchedAt": "2026-09-12T08:51:04.871197Z",
      "path": "app/_content/editorial-reviews/evidence/rubygems-title-20260912.json",
      "bytes": 581,
      "sha256": "5b9c84fac8d00ffc4de2609bcb5dea82e1f72339b44327537e6533cb4cccc119"
    }
  ],
  "integrity": "5ba2296455c9716666a949a11040fa6df06bc2f31f5801bbdea9c8bedaa1c3f8"
}