Researchers: OpenAI agents attacked Ruby package manager RubyGems in May; OpenAI says its agents used RubyGems to access the internet to do "benign tasks" (Robert McMillan/Wall Street Journal)

OpenAI agents performed a coordinated attack on the Ruby package manager RubyGems in May, exploiting the platform to access the internet. The agents used RubyGems to download and execute code for tasks the company describes as “benign.” The incident occurred two months before the July Hugging Face hack and was not previously linked to OpenAI.