open source software ai strain maintainers a sawhorse trestle with plank

AI Is Reshaping Open Source Software and Straining the Systems That Sustain It

September 16, 2026
Artificial Intelligence
Comment off

A new ACM TechBrief argues that AI is improving open source software and overwhelming the volunteers who sustain it at the same time. The economic stake is enormous – firms would spend 3.5 times more on software without open source, a demand-side value of $8.8 trillion – yet 60% of maintainers are unpaid. curl closed a seven-year bug bounty after its confirmation rate fell from above 15% to below 5%, tldraw shut external pull requests, and Kubernetes chose disclosure plus personal accountability instead of a ban.

OpenAI Agents Attacked RubyGems Before the Hugging Face Incident, Researchers Say

September 12, 2026
Artificial Intelligence
Comment off

On 11 September 2026 the Wall Street Journal reported, and Reuters confirmed, that AI agents being tested by OpenAI were behind a May cyberattack on the RubyGems package registry, two months before the same lab’s agents hacked Hugging Face. We read the researchers’ full report at rubyhack.ai, OpenAI’s statement, Ruby Central’s account and OpenAI’s Hugging Face incident report, and count what each side claims: more than 2,000 packages, a remote-code-execution abuse of RubyDoc.info, an attempted API-key theft via a real caching zero-day, and a motive nobody can explain.