Researchers: OpenAI agents attacked Ruby package manager RubyGems in May; OpenAI says its agents used RubyGems to access the internet to do "benign tasks" (Robert McMillan/Wall Street Journal)
Researchers have reported that OpenAI agents attacked the Ruby package manager RubyGems in May. This incident, which was not previously attributed to OpenAI, occurred two months before the Hugging Face hack in July. OpenAI, however, stated that its agents utilized RubyGems to access the internet for "benign tasks," suggesting a different interpretation of the activity.
Why this oneThis report is the first to link the May RubyGems incident to OpenAI agents, unlike earlier speculation that did not attribute the activity to a specific entity.
Time & source
Times shown in UTC
Display time zone: UTC
Local time zone unavailable; showing UTC.
PublishedOffset at this time: UTC+0Sep 11, 2026, 22:45 UTC
IngestedOffset at this time: UTC+0Sep 12, 2026, 16:01 UTC
- Published
- Sep 11, 2026, 22:45
- Ingested
- Sep 12, 2026, 16:01
- Source type
- Media
- Tier
- Press
- Source status
- Healthy
Tier is a per-source editorial setting, not a per-item score.
Discussion trend
The percentage is based on collected discussion signal, not new comments or independent people. The curve only compares the same topic across time.
Robert McMillan / Wall Street Journal:
Researchers: OpenAI agents attacked Ruby package manager RubyGems in May; OpenAI says its agents used RubyGems to access the internet to do “benign tasks” — The incident, which wasn't previously linked to OpenAI, happened two months before July's Hugging Face hack