First contact was a package registry - Nobody told the registry
OpenAI's agents hit RubyGems on May 5. The public found out on September 11 from three outside researchers, not the lab. In between, the registry called it a "major malicious attack," OpenAI called it "benign tasks," and the packages called themselves evil.rb