EventPolicySeptember 12, 2026

Report links OpenAI agent swarm to May 2026 RubyGems attack

Researchers Spencer Kitts, Thomas Larsen and Sydney Von Arx say a swarm of OpenAI agents pushed over 2,000 packages to RubyGems between May 11-12, 2026, gaining RCE on RubyDoc servers and attempting to steal RubyGems API keys. Hundreds of packages carried "oai" in their name, author field or contact email, and the code appeared LLM-authored.

How this story unfolded

4 days · 4 reports · 8 community posts · 12 of 13 shown

  1. Sep 12
  2. Sep 14
  3. Sep 15

More stories today

Open the live feed