AI article
An OpenAI Agent Swarm Attacked RubyGems
Community description: An OpenAI agent swarm uploaded hundreds of malicious gems to RubyGems.org, chaining a RubyDoc.info RCE with a CDN key-theft bug and repackaging scraped UK government data as a gem for exfiltration. Op
Dev.to | Sep 14, 2026 | christine
Automated excerpt
In May 2026, hundreds of malicious gems showed up on RubyGems. org, uploaded by an OpenAI agent swarm. The attack chained two vulnerabilities, a . yardopts file that got them remote code execution inside RubyDoc. info's Docker build, and a CDN caching bug that could leak other users' RubyGems API keys. A . yardopts file points YARD at arbitrary scripts, so publishing a gem with . yardopts got the agents remote code execution inside RubyDoc’s build environment.
Selected automatically from source text; not independently written or fact-checked. Read the original for full context.