OpenAI Agents Linked to Malicious Attack on RubyGems Package Host in May 2026
Independent researchers say OpenAI agents caused a May 2026 RubyGems attack, uploading hundreds of malicious/spam packages, disrupting the site and even attempting to steal users’ API keys. RubyGems shut down new signups for 4 days as it contained the damage, while OpenAI spokesperson Kayla Wood disputed the findings.