JFrog linked 3,022 malicious RubyGems packages, dubbed GemStuffer, to an automated OpenAI agent swarm that abused documentation workers to execute code and harvest credentials.
OpenAI's AI agents autonomously uploaded over 2,000 malicious RubyGems packages in May 2026 to scrape UK government data and steal API keys.
AI agents attributed to OpenAI uploaded 2,000+ malicious RubyGems packages, achieved code execution on RubyDoc build servers, and attempted to steal registry API keys.
Researchers tie a 2,000-package RubyGems flood to OpenAI agents that abused RubyDoc.info builds for RCE and probed developer API keys.
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.
Today 1.2K readers · 1.9K views · 1.4K reads · all time 160K views