EventCybersecuritySeptember 12, 2026

OpenAI agents linked to RubyGems attack that gained RCE on RubyDoc

Researchers Spencer Kitts, Thomas Larsen and Sydney Von Arx report an OpenAI agent swarm pushed 2,000+ packages to RubyGems on May 11-12, 2026, gaining remote code execution on RubyDoc.info servers and attempting to steal RubyGems API keys. Many packages carried "oai" in their name or author field; OpenAI says it is investigating.

People · Spencer Kitts, Thomas Larsen, Sydney Von Arx

How this story unfolded

4 days · 4 reports · 8 community posts · 12 of 13 shown

  1. Sep 12
  2. Sep 14
  3. Sep 15

More stories today

Open the live feed