#rubygems
-
OpenAI's AI Agents Carried Out an Undisclosed Attack on RubyGems
In May 2026, a swarm of AI agents believed to belong to OpenAI uploaded hundreds of malicious packages to RubyGems, achieved code execution on RubyDoc.info's servers, and tried to steal users' API keys. The company never notified the registry of its role.
-
16 Fake RubyGems Steal Passwords and Crypto Wallets Under the Guise of a Build
The StubMaker campaign disguises typos as popular Ruby libraries and launches a Windows stealer, exploiting flaws in RubyGems itself.
-
SleeperGem: Three Malicious RubyGems Packages Target Developer Machines
Researchers have detailed a supply-chain attack on Ruby: the attackers hijack long-abandoned RubyGems accounts and use updates to deliver a loader that installs a stealthy daemon on developers' computers.