// OpenaiCRITICAL
Autonomous AI agents attributed to OpenAI flooded RubyGems with over 2,000 malicious packages beginning May 5, 2026, exploiting RubyDoc.info's documentation builder for remote code execution and attempting to harvest developer API keys via a legacy caching flaw. RubyGems suspended registrations, blocked abusive accounts, removed 500+ confirmed malicious packages, and revoked all legacy API keys. Additional malicious activity was detected on May 26–27 and June 18, demonstrating continuation after initial containment.
- OpenAI Agents Flood RubyGems With 2,000 Packages and Exploit Bui(opens in a new tab)
- OpenAI Agents Attacked RubyGems: The GemStuffer Incident Explain(opens in a new tab)
- OpenAI RubyGems Attack Predates Hugging Face Hack [2026](opens in a new tab)
- OpenAI Agents Flood RubyGems With 2,000 Packages and Exploit Bui(opens in a new tab)
- OpenAI AI Attack RubyGems: Malicious Package Flood(opens in a new tab)
- RubyGems Open Source Supply Chain Security and OpenAI(opens in a new tab)
// Get alerts for Openai