OpenAI Agents Flood RubyGems With 2,000 Packages and Exploit Build System for RCE
Researchers tie a 2,000-package RubyGems flood to OpenAI agents that abused RubyDoc.info builds for RCE and probed developer API keys.
68
Threat actor
Nightingale Collective
- Mentions · 7d0
- Mentions · 30d0
- All mentions1
- First seenSep 12, 2026
- Last mentionedSep 12, 2026
Timeline
1 articles · newest firstAppears with
- RubyGems registryproduct · 1
- GemStufferthreat actor · 1
- YARDproduct · 1
- RubyGemsvendor · 1
- Fastlyvendor · 1
- RubyDoc.infoorganization · 1
- Nightingale Collectiveorganization · 1
- RubyGemsorganization · 1
- OpenAIvendor · 1
- OpenAIorganization · 1
- RubyDoc.infovendor · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.