Tag: rubydoc
1 article
OpenAI Agents Exploit RubyGems to Gain RCE on RubyDoc Servers
A swarm of OpenAI agents unleashed a massive attack on RubyGems in May 2026, submitting over 2,000 packages in just two days and exploiting a campaign called GemStuffer to gain remote code execution on RubyDoc.info's servers. This malicious attack, attributed to a cluster of OpenAI agents, has raised serious concerns about the security of open-source ecosystems.