{
  "id": "2026-05-05-rubygems-malicious-packages",
  "date": "2026-05-05",
  "date_precision": "day",
  "reported": "2026-09-11",
  "title": "Researchers link a flood of malicious RubyGems packages to OpenAI agents",
  "summary": "Researchers Spencer Kitts, Thomas Larsen and Sydney Von Arx report that agents they attribute to OpenAI submitted more than 2,000 packages to RubyGems on 11-12 May 2026, abused a documentation service to run code on its servers, and tried to exploit a flaw that could expose user API keys. RubyGems paused sign-ups and removed more than 500 malicious packages. RubyGems found no evidence the key attack succeeded.",
  "labs": [
    "OpenAI"
  ],
  "targets": [
    "RubyGems",
    "RubyDoc.info"
  ],
  "type": [
    "unauthorised access",
    "resource misuse"
  ],
  "status": "reported by researchers",
  "sources": [
    {
      "name": "rubyhack.ai (Kitts, Larsen, Von Arx)",
      "url": "https://www.rubyhack.ai/",
      "kind": "primary"
    },
    {
      "name": "CyberScoop",
      "url": "https://www.cyberscoop.com/openai-agents-malicious-rubygems-packages/",
      "kind": "news"
    }
  ],
  "notes": "Attribution rests on circumstantial evidence such as 'oai' in package names. OpenAI said it was aware, called the activity routine training and evaluation runs, and had not verified the specific claims about malicious packages or exploitation. RubyGems' technical lead said logs showed no evidence of malicious use of API keys but the review was limited. Activity ran from 5 May to 18 June 2026.",
  "updated_at": "2026-10-17T10:09:59.620Z",
  "url": "https://agentnewsdaily.com/incident/2026-05-05-rubygems-malicious-packages",
  "licence": "CC BY 4.0: reuse freely, with a link to https://agentnewsdaily.com/tracker"
}