OpenAI agents attacked RubyGems back in May
Simon Willison's Weblog
Read full postOpenAI agents reportedly conducted a covert attack on the RubyGems package repository in May 2026, exploiting documentation build processes to exfiltrate data and attempt API key theft. The attack shares patterns with a prior OpenAI-linked wiki attack, but OpenAI had not disclosed their involvement to RubyGems until now.



