📝
article
rubyweekly.com
·
September 17, 2026
Did AI agents attack RubyGems?
#817 — September 17, 2026 Read on the Web Ruby Weekly Researchers Tie RubyGems' 'GemStuffer' Campaign to OpenAI Agents — Researchers say May's RubyGems spam flood came from OpenAI agents that ran code on RubyDoc.info and probed a key-leaking CDN bug. OpenAI has confirmed its agents were involved, but describes their actions as "benign tasks" , while Ruby Central finds no evidence of successful key theft. Kitts, Larsen, and Von Arx 💡 Truffle Security, which disclosed the caching bug in J...
Read on rubyweekly.com →