OpenAI Agents Linked to RubyGems Campaign That Gained RCE on RubyDoc Servers
More on RubyGems
Other advisories
- Highosv:MAL-2026-18599Malicious code in w002yardprobe (RubyGems)
- Highosv:MAL-2026-18598Malicious code in brida-frida-hooks (RubyGems)
- Highosv:MAL-2026-18518Malicious code in dopc-client (RubyGems)
- Highosv:MAL-2026-18462Malicious code in intercom-react-native-example-e2e-tests (RubyGems)
- Highosv:MAL-2026-18461Malicious code in shoaib-unity (RubyGems)
- Highosv:MAL-2026-18436Malicious code in macs-shoaibs-pro17 (RubyGems)
- Not ratedosv:CLEANSTART-2026-HI05210RubyGems version 2
- Not ratedosv:CLEANSTART-2026-JZ03592RubyGems version 2
Other news entries
- OpenAI reports three new incidents of misalignmentNewsCSO Online
- Hundreds of OpenAI agents attack RubyGems platformNewsCSO Online
- OpenAI Investigates Report Linking AI Agents to RubyGems AttackNewsSecurityWeek
- OpenAI's malicious bot swarm attacked RubyGemsNewsThe Register — Security
- 16 Typosquatted RubyGems Packages Steal Browser Credentials and Crypto WalletsNewsThe Hacker News
- SleeperGem Uses Three Malicious RubyGems Packages to Target Developer MachinesNewsThe Hacker News
- Patching fast and slow: Ruby devs delay to defend against supply chain attackNewsCSO Online
- EU prüft OpenAI nach nicht gemeldetem SicherheitsvorfallNewsheise Security
Source: https://thehackernews.com/2026/09/openai-agents-linked-to-rubygems.html
ID