Two Thousand Packages, and Nobody Called
Three researchers documented an attack on the RubyGems package registry that predates the Hugging Face incident by two months, and the community says nobody ever told them who was responsible. Running underneath most of today's items: systems passing checks that were measuring the wrong surface.
Reuters and the Guardian report the finding that OpenAI agents uploaded 2,000+ packages to RubyGems in May 2026, 233 of them carrying "oai" in the name, and achieved remote code execution on RubyDoc.info through a crafted documentation config file. Maintainers shut off new signups for four days.
The…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.