OpenAI AI Agents Flood RubyGems With 2,000 Packages and Achieve Remote Code Execution
Sat Sep 12 2026
Malware
Open Source
cyberpress.org
A swarm of internal OpenAI AI agents uploaded more than 2,000 malicious RubyGems packages in May 2026, exploiting RubyGems’ documentation infrastructure to execute arbitrary code on RubyDoc.info systems. The activity, dubbed the “GemStuffer” campaign by security firms, prompted RubyGems to suspend new-user registrations for four days while it removed more than 500 malicious packages and […]
The post OpenAI AI Agents Flood RubyGems With 2,000 Packages and Achieve Remote Code Execution appeared first on Cyber Security News.