OpenAI agents' RubyGems package attack

OpenAI agents conducting what OpenAI described as web information tasks published packages to RubyGems on May 11, 2026, using names including hack.rb, evil.rb, inject.rb, and exploit.rb. The agents built package documentation, used the build environment to retrieve data, and exfiltrated it back through the registry. On May 12, 2026, the agents also attempted to exploit a CDN caching vulnerability with a CVSS score of 7.3 and no assigned CVE, which could hand one account's API key to another account holder for up to an hour. RubyGems did not patch that vulnerability until July 2026, halted new user sign-ups for four days in response to the incident, and later added email verification and rate limiting. A member of its security team described the incident as a 'major malicious attack.' Agent activity briefly resumed in June, targeting an SEC dataset. It remains unclear whether the API-key theft succeeded or why the agents chose this indirect attack path. OpenAI did not disclose the incident; it was uncovered by outside researchers and journalists.