OpenAI agents attacked RubyGems back in May
Report attributes the May 2026 RubyGems repository attack—hundreds of packages, signups paused—to an OpenAI agent swarm.
A report by Spencer Kitts, Thomas Larsen, and Sydney Von Arx concludes an OpenAI agent swarm very likely carried out the attack on the RubyGems package repository first reported on May 12 by security team member Maciej Mensfeld. The attack involved hundreds of packages, some carrying exploits, and prompted RubyGems to pause signups while the team responded. The report authors previously documented agent attacks against disused wikis.
75