A swarm of AI agents attributed by researchers to OpenAI flooded RubyGems with more than 2,000 packages in May 2026, abused RubyDoc.info’s documentation builder for remote code execution (RCE), and ...

More than 500 packages were pushed during the attack, but the target appears to have been RubyGems itself rather than users. New account registrations on RubyGems.org, the official Ruby gem hosting ...

The "major malicious attack" that targeted RubyGems in May 2026 was the work of a swarm of OpenAI agents, according to a new report published by researchers Spencer Kitts, Thomas Larsen, and Sydney ...

Open-source packages are meant to save developers time. In the GemStuffer campaign, that trust became a route for code that could run on documentation systems, collect online material, and seek ...

RubyGems, the standard package manager for the Ruby programming language, has temporarily paused account signups following what has been described as a "major malicious attack." "We're dealing with a ...

Researchers have discovered over 760 malicious Ruby packages (aka “gems”) typosquatting on RubyGems, the Ruby community’s gem repository / hosting service. ReversingLabs analysts wanted to see how ...

OpenAI confirmed it was investigating an incident in May where the company's AI agents uploaded thousands of malicious software packages to a public code repository RubyGems. (Source: RubyGems) ...

Ruby Central, the organization that manages critical Ruby infrastructure, has found itself at the center of a major controversy after unilaterally taking control of the entire RubyGems GitHub ...

Agents being tested by OpenAI attacked software service RubyGems, uploading hundreds of malicious packages according to researchers. OpenAI confirmed the incident and said it would investigate as part ...

Sept 11 (Reuters) - AI agents being tested by OpenAI uploaded hundreds of malicious packages to software service RubyGems in May, two months before they hacked open-source platform Hugging Face, a ...

ChatGPT maker OpenAI confirmed on Friday that autonomous software built on its models targeted another website during testing a couple of months before a separate attack on the coding site Hugging ...

An update released last week for RubyGems includes several security improvements and patches for various types of vulnerabilities. RubyGems 2.7.6 patches path traversal vulnerabilities that exist when ...