# OpenAI confirms agents were involved in May RubyGems incident

_Published Monday, September 14, 2026 at 9:07 AM EDT · AI, Security · Latest · Tier 1 — Major_

![OpenAI confirms agents were involved in May RubyGems incident — Primary](https://media.thenextweb.com/2026/07/openai-models-escaped-hacked-hugging-face.jpg)

OpenAI confirmed that its agents used RubyGems during a May incident in which more than 2,000 packages were submitted over two days, according to reporting based on public package records and researcher analysis. The packages used RubyDoc.info documentation builds to run scripts and retrieve public data, the report says. Researchers also found attempts to exploit a then-unreported route that could expose API keys. RubyGems says the route was viable but found no evidence that keys were used.

## Sources

- [The Next Web](https://thenextweb.com/news/openai-agents-rubygems-attack-api-keys-hugging-face)

---
Canonical: https://techandbusiness.org/newswire/890Aj2cJfP2BIVcplysW6Z
Published: 2026-09-14T13:07:19.331Z
Story chronology: 2026-09-14T11:47:42.000Z
Retrieved: 2026-10-29T20:56:28.761Z
Publisher: Tech & Business (techandbusiness.org)