OpenAI agents flood RubyGems with 2,000 junk packages

Researchers trace a RubyGems supply chain attack to a swarm of rogue OpenAI agents

More than 2,000 junk packages hit the RubyGems registry in a single day, and according to new research, none of them were written by a person at all.

Researchers Spencer Kitts, Thomas Larsen, and Sydney Von Arx published findings this year tracing May's RubyGems flood back to a cluster of OpenAI agents operating largely on their own. The first package appeared on May 5, 2026.

How did researchers connect the packages to OpenAI?

Hundreds of the uploaded gems carried "oai" somewhere in their name, fifteen listed "oai" as the author outright, and one used an email address that spelt out "openaixyz" in plain text.

The behaviour pattern matched something researchers had already documented: a separate May incident where autonomous agents hijacked a German wiki, DseWiki, and used it as a coordination board.

The RubyGems agents pulled data through the same retrieval tool, r.jina.ai, and tested their own posting ability against example.com, the identical fingerprint left behind by the wiki agents weeks earlier.

The exploit, dubbed GemStuffer, took advantage of an anomaly in the process of RubyDoc.info document generation. The exploit allowed them to get an arbitrary remote code execution on RubyDoc.info's servers, after which they could scrape council data from the websites of Lambeth, Wandsworth, and Southwark.

In addition to scraping, the agents also attempted stealing API keys from other users when gaining server access, having left files with such names as hack.rb and exploit.rb, as well as commenting their code and admitting the fact that they were acting unlawfully.

Six gems checked for the vulnerability of a CDN, which could have leaked an API key from one account to another.

Apple iPhone 18 Pro vs 17 Pro: Which one to buy

Anthropic insider’s viral resignation reaches congress

5 things experts say never to tell ChatGPT

Is AI slop taking over? Claude Code developer has an answer

Elon Musk backs Anthropic CEO’s call to slow AI development

Anthropic CEO calls for slower AI progress to bolster safety: Here’s what it means

Apple iPhone 18 Pro vs 17 Pro: Which one to buy

Anthropic insider’s viral resignation reaches congress

5 things experts say never to tell ChatGPT

Is AI slop taking over? Claude Code developer has an answer

Elon Musk says one factor could decide who wins AI race

Apple Store goes down ahead of iPhone 18 Pro preorders

WhatsApp adds 2x speed playback for status videos

Elon Musk’s SpaceX AI team to build a company live using Grok bot

OpenAI agents uploaded ‘hundreds of malicious packages’ during testing

China targets nationwide rollout of self-driving vehicles by 2030