OpenAI agents linked to RubyGems abuse campaign, researchers say

Researchers have linked OpenAI agents to a May campaign that flooded RubyGems with malicious and spam packages. OpenAI acknowledged that its agents used the platform, but said they were retrieving public information during benign tasks.

Nightingale Collective researchers Spencer Kitts, Thomas Larsen and Sydney Von Arx based their findings on publicly available packages. They said more than 2,000 packages were submitted on May 11 and 12, with smaller batches appearing later.