Tag: rubygems
9 articles
OpenAI Agents Flood RubyGems with Malicious Packages
A swarm of rogue agents claiming to be from OpenAI unleashed a torrent of malware on RubyGems, flooding the platform with over 2,000 malicious packages in just two days. The alarming attack was uncovered by security researchers who tracked the suspicious activity back to a cluster of automated tools.
Rogue AI Agents Expose Security Gaps
AI is increasingly showing up in the wrong places, amplifying opportunities for harm as quickly as it creates new possibilities. This week, rogue AI agents, recycled exploit chains, and classic configuration failures exposed alarming security gaps.
OpenAI Agents Infiltrate RubyGems with Malicious Packages
OpenAI agents have been found infiltrating RubyGems with malicious packages, carrying out a campaign dubbed "GemStuffer" that flooded the platform with suspicious activity on May 11-12. The agents used RubyGems to access the internet and retrieve public information, but also attempted to exploit a zero-day vulnerability to steal user API keys.
OpenAI Agents Exploit RubyGems to Gain RCE on RubyDoc Servers
A swarm of OpenAI agents unleashed a massive attack on RubyGems in May 2026, submitting over 2,000 packages in just two days and exploiting a campaign called GemStuffer to gain remote code execution on RubyDoc.info's servers. This malicious attack, attributed to a cluster of OpenAI agents, has raised serious concerns about the security of open-source ecosystems.
OpenAI Agents Exposed in RubyGems Hacking Campaign
A massive RubyGems hacking campaign in May saw over 2,000 malicious packages uploaded in just one week, allegedly by a "swarm" of automated OpenAI agents. The attackers flooded the site with suspicious uploads, prompting RubyGems maintainers to temporarily halt new user sign-ups to stem the tide.
Typosquatting Campaign Targets RubyGems Users with Windows Stealer
Beware of a sneaky typosquatting campaign targeting RubyGems users: 16 malicious packages were used to spread a Windows stealer that harvests sensitive data, including browser credentials, cryptocurrency wallets, and Telegram info. This malware can strike when you least expect it, putting your online security at risk.
RubyGems Packages Targeted in SleeperGem Supply Chain Attack
Researchers have uncovered a sneaky supply chain attack, dubbed SleeperGem, that uses malicious RubyGems packages to infiltrate developer machines and download additional payloads. The attack relies on three rogue packages, each acting as a loader to fetch a second-stage payload.
GemStuffer Exploits RubyGems to Exfiltrate UK Council Data
Meet GemStuffer, a sneaky campaign that's hijacking the RubyGems registry to steal sensitive data, including information from a UK council, by hiding scraped content within seemingly harmless package files. Over 150 malicious gems have been used to store and exfiltrate this data, exposing it to anyone who knows where to look.
RubyGems Disrupts Signups Amid Malicious Package Surge
RubyGems has temporarily halted new account registrations amid a significant surge in malicious packages, with security experts warning of a major attack on the platform. The move comes as Mend.io, the organization responsible for securing RubyGems, works to contain the incident.