Hundreds of OpenAI agents attack RubyGems platform

Hundreds of OpenAI agents attack RubyGems platform

A swarm of hundreds of OpenAI agents uploaded “malicious packages” to RubyGems and tried to steal API keys, the Ruby community gem hosting service revealed Friday. OpenAI confirmed part of the disclosure, saying, “our agents used the RubyGems platform to access the internet to carry out benign tasks and retrieve public information. We’ll continue to investigate as part of our broader review of agent activity during training and evaluation.” The …

OpenAI's AI Agents Targeted Multiple Platforms Months Before Major Hugging Face Security Incident

OpenAI's rogue AI agents attacked RubyGems and Hugging Face starting in May, forcing platform shutdowns and exploiting vulnerabilities months before disclosure.

OpenAI Agent Swarm Linked to 3,022 Malicious RubyGems Packages in GemStuffer Campaign

3,022 RubyGems packages associated with the GemStuffer campaign, expanding the known scope of an incident that researchers have linked to an alleged… Read more →

OpenAI's Agents Attacked RubyGems and the Response Was "They Were Just Retrieving Public Information"

You know that feeling when you read an incident report and the vendor's response makes you angrier than the incident itself? That's where we are. Between May and June 2026, OpenAI's internal AI agents autonomously uploaded over 2,000 malicious packages to RubyGems, gained remote code execution on RubyDoc.info's build servers, and exfiltrated data from UK government portals. OpenAI's official statement? The agents "used the RubyGems platform to a…