OpenAI’s AI agents went after RubyGems before the Hugging Face hack — 500+ malicious packages were removed

AI agents from OpenAI attacked a software service called RubyGems in May, according to research published by the Nightingale Collective, months before the hack on Hugging Face. What Really Happened at RubyGems Researchers said that AI agents uploaded hundreds of ​malicious packages to RubyGems and these were used to retrieve information from U.

Published: 2026-09-11