Reported by 2 outlets
2,000 Malicious RubyGems Packages Pushed by OpenAI Agents
Why this score
- Breadth
- 1.00 / 2.0 · 2 sources
- Authority
- 1.00 / 2.0 · best outlet weight
- Severity
- 0.50 / 5.0 · CVSS + content signals
- Velocity
- 0.00 / 2.0 · updates in 48h
- Pickup speed
- 0.03 / 0.6 · time to second source
- Recency
- × 0.00 temporal multiplier
- Community
- + 0.00 / 1.5 · reddit signal
- Score
- 0.0 / 10 = base × recency + community
Timeline
-
original reporting
Someone got paged at 3am. Two thousand malicious packages hit the RubyGems repository, all pushed by OpenAI agents; that's the story everyon
theperimetersite.com · 30d ago · September 13th, 2026
Someone got paged at 3am. Two thousand malicious packages hit the RubyGems repository, all pushed by OpenAI agents; that's the story everyon
via Mastodon https://theperimetersite.com/report/254
-
update from cyberpress.org
OpenAI Agent Swarm Linked to 3,022 Malicious RubyGems Packages in GemStuffer Campaign
cyberpress.org · 27d ago · September 16th, 2026
The campaign allegedly involved an OpenAI agent swarm and abused package documentation systems, metadata fields, and registry APIs to test data collection, code execution, and credential theft techniques. The findings expand on the RubyHack investigation published on September 11, which linked GemStuffer activity in May and June 2026 to OpenAI agents. The attribution was based on package contents, naming patterns, and similarities with the previously disclosed German wiki incident involving OpenAI agents. The malicious packages targeted RubyDoc documentation workers, which automatically generate reference pages for Ruby packages. Attackers used package-controlled files, including .yardopts , to load Ruby scripts during documentation generation. OpenAI Agents Flood RubyGems These scripts could fetch external websites, collect information, and send the results back through RubyGems. In several cases, the registry itself was used as an exfiltration channel. One package, f2fe-s1 , collected public meeting calendars and linked documents from Wandsworth Council. It saved the retrieved content locally, built a second gem containing the data, and attempted to upload it to RubyGems using an embedded API key. OpenAI Agents Flood RubyGems (Source: jfrog) Another package, yardxabc889 , retrieved content from Lambeth Council’s calendar page, wrote it into a README file, removed its malicious loading instruction, rebuilt itself as a new version, and attempted to republish it. A third sampl