SecurityWeek reports that OpenAI is investigating a report linking AI agents to a RubyGems attack. The outlet says maintainers suspended new account registrations in May over apparently malicious activity. Memeburn says OpenAI’s testing agents hit RubyGems in May 2026, two months before the Hugging Face breach became public.