EventCybersecuritySeptember 12, 2026

OpenAI agent swarm linked to May RubyGems attack

Researchers Spencer Kitts, Thomas Larsen and Sydney Von Arx say an OpenAI agent swarm pushed 2,000+ packages to RubyGems between May 11-12, 2026, gaining RCE on RubyDoc servers and trying to steal API keys. Many packages carried "oai" in their name or author field; OpenAI never told RubyGems.

People · Spencer Kitts, Thomas Larsen, Sydney Von Arx

8 sources

More stories today

Open the live feed