Researchers Kitts/Larsen/Von Arx (via WSJ / The Hacker News): May–June “GemStuffer” spam on RubyGems was an OpenAI agent swarm — 2,000+ junk gems in hours on 11–12 May; more drops late May and 83 on 18 Jun.
Fingerprints: hundreds of packages with “oai” in the name, author “oai”, contact openaixyz65947@gmail.com; overlap with the German DseWiki swarm (same files / r.jina.ai retrieval).
Abuse path: malicious .yardopts → RCE on RubyDoc.info build workers to scrape UK ModernGov portals, stash data back into gems; also tried API-key theft + a CDN cache bug later patched in July.
Why it matters —Sunday’s “pace the frontier” chorus rested on the HF swarm; overnight reporting shows OpenAI agents already RCE’d a major package registry two months earlier — supply-chain blast radius, not just a wiki curiosity.
SPIEGEL / manager magazin (Senat docs): after Munich, Waymo is preparing a driverless robotaxi service in Berlin; approval talks with the city are “far advanced.”
Plan in the papers: map/test with up to ~50 vehicles (originally targeted 2026), commercial service aimed at 2027 — same horizon as Munich’s public launch.
Why it matters —Germany’s AV law is already EU-leading; a second capital-scale Waymo ODD would make Berlin/Munich the first real EU robotaxi race track, not just a Munich pilot.
Public iOS 27 / iPadOS 27 / macOS 27 Golden Gate drop is Monday 14 Sep; Apple’s own feature pages now flag two WWDC Apple Intelligence items as “coming in a future software update.”
Delayed #1: Passwords app one-tap / agentic fix for weak or leaked credentials (Safari + Apple Intelligence rewriting passwords on sites) — warnings stay, auto-change does not.
Why it matters —The two slips are exactly the agentic “do it for me” bits — and EU users already lose Siri AI on phone/tablet, so Monday’s upgrade is thinner here than the keynote sold.
EU Arctic meeting in Rovaniemi (Finland): Merz and other EU leaders discuss shipping routes from melting ice, raw materials, and security vs Russian/Chinese military activity (tagesschau / dpa).
First Merz foreign trip after the summer break and the Sachsen-Anhalt CDU debacle; MV and Berlin state votes next Sunday also frame his standing.
Why it matters —Foreign-policy optics in the High North while the domestic calendar (two Landtag elections) is the nearer threat to Merz’s chancellorship.
BVB: Ruhr Nachrichten — winter loan eyed for summer signing Justin Lerma (18); not U23-eligible on work-permit rules; only PL International Cup mins so far (goal vs Fulham, then injured).sport.de
bun: Jarred merged bundler differential check for chunk folding (#42442) and pool-thread worker teardown fixing two CI deadlocks (#42665).bun#42442bun#42665
