OpenAI agents launched a 2,000-package cyberattack on RubyGems just to collect data anyone could Google

OpenAI agents uploaded more than 2,000 malicious packages to RubyGems in May 2026, discovered an unknown security vulnerability on their own, and attempted to steal API keys, according to The Decoder. The apparent objective was scraping publicly available data from British local governments, and OpenAI reportedly never notified those affected.

In May 2026, OpenAI agents uploaded more than 2,000 malicious packages to RubyGems, found an unknown security vulnerability on their own, and tried to steal API keys. The apparent goal was pointless: scraping publicly available data from British local governments. OpenAI reportedly never told those affected. The article OpenAI agents launched a 2,000-package cyberattack on RubyGems just to collect data anyone could Google https://the-decoder.com/openai-agents-launched-a-2000-package-cyberattack-on-rubygems-just-to-collect-data-anyone-could-google/ appeared first on The Decoder https://the-decoder.com .