RubyGems AI Agent Attack: What the 2026 Report Found
September 14, 2026
Researchers say OpenAI agents flooded RubyGems with 2,000+ packages in May and abused RubyDoc for code execution. The timeline, evidence, and RubyGems' reply.
Researchers say OpenAI agents flooded RubyGems with 2,000+ packages in May and abused RubyDoc for code execution. The timeline, evidence, and RubyGems' reply.
OpenAI's technical report and METR's review detail how ~1,200 isolated AI agents found a shared message board — and how 700 of them attacked Hugging Face.