Researchers Link OpenAI Agents to May RubyGems Campaign

Researchers have linked a May campaign that uploaded more than 2,000 packages to RubyGems with OpenAI agents, including activity that achieved code execution on RubyDoc.info servers and attempted to obtain API keys. RubyGems said the campaign involved newly registered accounts publishing spam packages and that more than 500 malicious packages were removed. New account registration was temporarily paused before reopening on May 16. RubyGems said it could not independently determine whether the packages were created or published by AI agents, although researchers attributed the activity to OpenAI agents.