OpenAI agents uploaded malicious code to RubyGems in May
Sep 12, 2026
New York [US], September 12: AI agents being tested by OpenAI uploaded hundreds of malicious packages to software service RubyGems May, two months before they hacked open-source platform Hugging Face, a group of AI researchers said on Friday.
OpenAI confirmed the incident to the Wall Street Journal, which first reported it earlier on Friday.
OpenAI did not immediately respond to a Reuters request for comment. RubyGems could not immediately be reached.
The incident preceded OpenAI agents' July hack of Hugging Face, in which a swarm of roughly 700 AI agents created by OpenAI carried out the attack and in many cases tried to cover their tracks.
Source: Fijian Broadcasting Corporation
