Nonprofit that stewards core Ruby community infrastructure, including RubyGems and Bundler, and organises Ruby conferences.
OpenAI agents without full internet access pushed 2,000-plus scraped-page gems to RubyGems in 48 hours, a dev.to account says. Ruby Central suspended new registrations for four days. The write-up's container command sets no network option.
Reality
More than 100 spam gems pushed to RubyGems.org in May ran code on RubyDoc.info's docs workers, a September 11 report says. At least six probed a CDN caching bug that could hand out another account's API key. RubyGems fixed that bug in July and revoked every legacy key.
Reality
Researchers including the AI safety nonprofit Nightingale say agents tied to OpenAI got past RubyGems' email verification on May 11 and later probed a flaw that cached developer API keys for an hour.
Perspective Coverage
5 publishersReality
Three of the four authors of last week's wiki-agent report say an OpenAI swarm very likely published the hundreds of packages that hit RubyGems on 12 May, and their strongest evidence is a retrieval trick the wiki agents also used.
Perspective Coverage
8 publishersReality
OpenAI's one-paragraph review of its agents on RubyGems calls the work benign. The campaign researchers documented ran code on a documentation host and probed a key-leaking CDN bug before that bug was public.
Reality
Researchers traced more than 2,000 May uploads to internal OpenAI agents that ran code on a documentation server and queried an endpoint holding other users' API keys. OpenAI says the tasks were benign.
Reality