Reported by 13 outlets

Timeline

1. original reporting

   OpenAI Agents Flood RubyGems With 2,000 Packages and Exploit Build System for RCE Indicators extracted from public reporting. Source: https:

   cybersecuritynews.com · 32d ago · September 12th, 2026

   OpenAI Agents Flood RubyGems With 2,000 Packages and Exploit Build System for RCE Indicators extracted from public reporting. Source: https:

   via Mastodon https://cybersecuritynews.com/openai-agents-flood-rubygems/

2. update from thecybersecguru.com

   OpenAI agents reportedly attacked RubyGems in the campaign researchers dubbed “GemStuffer.” The activity involved 2,000+ malicious packages,

   thecybersecguru.com · 32d ago · September 12th, 2026

   OpenAI agents reportedly attacked RubyGems in the campaign researchers dubbed “GemStuffer.” The activity involved 2,000+ malicious packages,

   via Mastodon https://thecybersecguru.com/news/openai-agents-rubygems-gemstuffer-attack/

3. update from cyberpress.org

   OpenAI AI Agents Flood RubyGems With 2,000 Packages and Achieve Remote Code Execution

   cyberpress.org · 32d ago · September 12th, 2026

   A swarm of internal OpenAI AI agents uploaded more than 2,000 malicious RubyGems packages in May 2026, exploiting RubyGems’ documentation infrastructure to execute arbitrary code on RubyDoc.info systems. The activity, dubbed the “GemStuffer” campaign by security firms, prompted RubyGems to suspend new-user registrations for four days while it removed more than 500 malicious packages and introduced additional account-creation controls. Researchers Spencer Kitts, Thomas Larsen, and Sydney Von Arx said their findings are based solely on publicly available packages and metadata, and that they cannot determine the agents’ underlying intent or whether key-theft attempts succeeded. OpenAI AI Agents Flood RubyGems The earliest suspected agent-authored package appeared on May 5, followed by a sharp surge between May 11 and May 12. Package names such as oaibootx8192 , oaitest1778473828 , and lambprobe4340 included apparent OpenAI references. OpenAI Agent Package uploads to RubyGems (Source: rubyhack) Fifteen packages named “oai” as the author, while another contained an OpenAI-themed Gmail address. The attribution remains circumstantial for the RubyGems incident itself. However, researchers said the package behavior closely resembled previously identified AI activity against German-language wikis, an operation OpenAI later acknowledged involved its agents. The June RubyGems activity reportedly accessed 49 files also targeted during that campaign, while 1,397 malicious gems referenced r

4. update from simonwillison.net

   OpenAI agents attacked RubyGems back in May https:// simonwillison.net/2026/Sep/12/ openai-agents-rubygems/ Comments: https:// news.ycombina

   simonwillison.net · 31d ago · September 12th, 2026

   OpenAI agents attacked RubyGems back in May https:// simonwillison.net/2026/Sep/12/ openai-agents-rubygems/ Comments: https:// news.ycombina

   via Mastodon https://simonwillison.net/2026/Sep/12/openai-agents-rubygems/

5. update from gbhackers.com

   OpenAI Agents Flood RubyGems With 2,000 Packages and Exploit Build System for RCE

   gbhackers.com · 31d ago · September 12th, 2026

   A swarm of AI agents believed to be operated internally by OpenAI uploaded more than 2,000 malicious packages to RubyGems in May 2026, abusing the ecosystem’s documentation build process to execute code remotely and attempting to steal user API keys through a then-undisclosed server-side flaw.

6. update from ai0.news

   OpenAI agents hit RubyGems in a third rogue infrastructure attack, 25 Fields Medalists signed an open letter over AI math misconduct, and An

   ai0.news · 31d ago · September 12th, 2026

   OpenAI agents hit RubyGems in a third rogue infrastructure attack, 25 Fields Medalists signed an open letter over AI math misconduct, and An

   via Mastodon https://ai0.news/posts/2026-09-12-daily-digest/

7. update from www.wsj.com

   CYBERATTACK BY ROGUE AI SWARM STOKES FEARS OF OUT-OF-CONTROL AGENTS. AI agents overwhelmed RubyGems, forcing new registrations offline for 4

   www.wsj.com · 31d ago · September 12th, 2026

   CYBERATTACK BY ROGUE AI SWARM STOKES FEARS OF OUT-OF-CONTROL AGENTS. AI agents overwhelmed RubyGems, forcing new registrations offline for 4

   via Mastodon https://www.wsj.com/tech/ai/cyberattack-by-rogue-ai-swarm-stokes-fears-of-out-of-control-agents-473a0352?st=M6wrkr&reflink=article_copyURL_share

8. mentioned by www.reuters.com

   OpenAI Agents Linked to RubyGems Campaign That Gained RCE on RubyDoc Servers Indicators extracted from public reporting. Source: https://www

   www.reuters.com · 31d ago · September 12th, 2026

9. update from www.reuters.com

   Both CEOs should be in jail, lose the key. The defense? "But your honor, we didn't do it. The bots declared independence and went on a rampa

   www.reuters.com · 31d ago · September 12th, 2026

   Both CEOs should be in jail, lose the key. The defense? "But your honor, we didn't do it.

10. update from www.redhotcyber.com

    OpenAI's agents attacked RubyGems! And the most worrying thing is that no one knows why

    www.redhotcyber.com · 31d ago · September 12th, 2026

    And the most worrying thing is that no one knows why. Pin Link to article: https://www.redhotcyber.com/post/gli-agenti-di-openai-hanno-attaccato-rubygems-e-la-cosa-piu-preoccupante-e-che-nessuno-sa-il-perche/

    via Mastodon https://www.redhotcyber.com/post/gli-agenti-di-openai-hanno-attaccato-rubygems-e-la-cosa-piu-preoccupante-e-che-nessuno-sa-il-perche/

11. mentioned by simonwillison.net

    OpenAI agents attacked RubyGems back in May Article URL: https:// simonwillison.net/2026/Sep/12/ openai-agents-rubygems/ Comments URL: https

    simonwillison.net · 31d ago · September 12th, 2026

12. mentioned by www.engadget.com

    OpenAI agents hacked a software service before the Hugging Face incident https://www.engadget.com/2256741/openai-agents-hacked-rubygems/ # A

    www.engadget.com · 31d ago · September 12th, 2026

13. update from www.theverge.com

    OpenAI's rogue AI tried to hack another company in May https://www.theverge.com/ai-artificial-intelligence/994383/openais-rogue-ai-rubygems-

    www.theverge.com · 31d ago · September 12th, 2026

    OpenAI's rogue AI tried to hack another company in May https://www.theverge.com/ai-artificial-intelligence/994383/openais-rogue-ai-rubygems-

    via Mastodon https://www.theverge.com/ai-artificial-intelligence/994383/openais-rogue-ai-rubygems-hack

14. update from www.engadget.com

    OpenAI agents have autonomously compromised a live software service — before the Hugging Face incident made headlines. Agentic AI systems ac

    www.engadget.com · 31d ago · September 12th, 2026

    OpenAI agents have autonomously compromised a live software service — before the Hugging Face incident made headlines. Agentic AI systems ac

    via Mastodon https://www.engadget.com/2256741/openai-agents-hacked-rubygems/

15. update from thehackernews.com

    🤖 New report links the May 2026 RubyGems supply-chain attack to a swarm of OpenAI agents, which gained RCE on RubyDoc servers. A coordinated

    thehackernews.com · 31d ago · September 13th, 2026

    🤖 New report links the May 2026 RubyGems supply-chain attack to a swarm of OpenAI agents, which gained RCE on RubyDoc servers. A coordinated

    via Mastodon https://thehackernews.com/2026/09/openai-agents-linked-to-rubygems.html

16. mentioned by www.engadget.com

    OpenAI agents hacked a software service before the Hugging Face incident The agents OpenAI was testing attacked a software service called Ru

    www.engadget.com · 31d ago · September 13th, 2026

17. mentioned by www.theverge.com

    OpenAI’s rogue AI tried to hack another company in May In May, hundreds of malicious and spam packages were uploaded to RubyGems, causing a

    www.theverge.com · 31d ago · September 13th, 2026

18. mentioned by reuters.com

    OpenAI agents attacked RubyGems before Hugging Face incident

    reuters.com · 29d ago · September 14th, 2026