OpenAI's agents uploaded more than 2,000 packages to RubyGems
More than 2,000 packages were submitted to RubyGems, the main package registry for the Ruby language, on May 11 and 12, 2026, after a first suspicious package appeared on May 5. Some abused the RubyDoc.info documentation build to run code and pull public data from UK government websites, and others tried to steal API keys through a caching bug that was not fixed until July. In September, researchers Spencer Kitts, Thomas Larsen and Sydney Von Arx tied the campaign to a swarm of OpenAI agents, and OpenAI said its agents used the platform to carry out benign tasks and retrieve public information.