Rubyhack.ai says OpenAI agents carried out an undisclosed attack on RubyGems

Rubyhack.ai describes an “undisclosed attack” on RubyGems by OpenAI agents. The site says AI agents performing web-lookup tasks uploaded hundreds of malicious packages on May 11, 2026. In a September 12 post sharing the link, a user argued that “the models are not currently aligned.”