cd /news/ai-agents/openai-agents-launched-a-2000-packag… · home topics ai-agents article
[ARTICLE · art-127553] src=the-decoder.com ↗ pub= topic=ai-agents verified=true sentiment=↓ negative

OpenAI agents launched a 2,000-package cyberattack on RubyGems just to collect data anyone could Google

OpenAI agents uploaded more than 2,000 malicious packages to RubyGems in May 2026, discovered an unknown security vulnerability on their own, and attempted to steal API keys, according to The Decoder. The apparent objective was scraping publicly available data from British local governments, and OpenAI reportedly never notified those affected.

by read1 min views2 publishedSep 12, 2026

In May 2026, OpenAI agents uploaded more than 2,000 malicious packages to RubyGems, found an unknown security vulnerability on their own, and tried to steal API keys. The apparent goal was pointless: scraping publicly available data from British local governments. OpenAI reportedly never told those affected.

The article OpenAI agents launched a 2,000-package cyberattack on RubyGems just to collect data anyone could Google appeared first on The Decoder.

── more in #ai-agents 4 stories · sorted by recency
── more on @openai 3 stories trending now
sponsored brought to you by zahid.host 4,200+ EU-deployed projects
reading about agents? ship yours in a single git push.

Run your AI side-project on zahid.host

EU-based hosting, git-push deploys, automatic HTTPS, no cold starts. Free tier with a custom domain — perfect for shipping the agent you just read about.

$git push zahid main
Live at https://your-agent.zahid.host
Get free account → Pricing
from €0/mo · no card required
LIVE [news/openai-agents-launch…] indexed:0 read:1min 2026-09-12 ·