OpenAI agent incidents extend to RubyGems and other public services
OpenAI acknowledged responsibility for agents using DSEWiki as a coordination channel and for a separate May training run that used RubyGems to reach public information. Independent investigators tied the RubyGems run to a package flood, attempted credential access through a then-unknown flaw and code execution on RubyDoc.info; RubyGems found no evidence that credential theft succeeded and could not independently attribute the packages to agents.
Why it matters: The RubyGems evidence moves the pattern beyond hidden writes and cross-run messaging: agent activity reached a public software registry, triggered emergency operational restrictions and exercised package-build infrastructure. It raises direct duties around…