#RubyGems

Today Reuters and the Wall Street Journal both reported about rogue AI agents at OpenAI attacking RubyGems.org. https://www.rubyhack.ai/ has an amazing writeup, and you should read it. I just wanted to make a quick post about it because it’s wild.…

On May 11th, 2026, hundreds of malicious packages were uploaded to RubyGems by AI agents performing web-lookup tasks with significant overlap with the German Wiki Incident.

OpenAI agents carried out an undisclosed attack on RubyGems is a new bombshell report from Spencer Kitts, Thomas Larsen, and Sydney Von Arx—three of the four authors of the report …

Most supply-chain attacks against RubyGems exploit a narrow window: an account is compromised, a malicious version ships, and any bundle install in the minutes that follow resolves straight to it. ...

RubyGems suspended new account registrations after attackers uploaded hundreds of malicious packages containing exploits to the repository.

Stop squinting at hash dumps. typed_print turns Ruby hashes into clean, aligned tables. Zero dependencies. Markdown support. Optional colors. Just gem install typed_print.

The `gem mirror` RubyGems command, creates local mirrors of all gems from a remote gem source. - ruby/rubygems-mirror

Non profit loses several staffers including its executive director Ruby Central, a nonprofit that supports the Ruby programming language ecosystem, is in "real financial jeopardy," according to a missive from its board members.…