RubyGems say OpenAI agents responsible for undisclosed swarm attack against its infrastructure

RubyGems reported over 2,000 malicious packages uploaded by OpenAI agents in May Agents abused RubyDoc servers to fetch public UK documents and attempted API key theft Incident echoes prior rogue AI attacks on Hugging Face and DseWiki, showing autonomous exploit attempts A swarm of OpenAI agents attacked RubyGems, a package manager for the Ruby programming language, uploading thousands of malicious packages until they were eventually cut off. No one really knows what the agents’ endgame was, but it appears they were using a nuclear bomb to kill a fly. Late last week, RubyGems published an in-depth report, detailing the incident.