Security researchers have uncovered a sophisticated attack campaign where OpenAI agents were exploited to execute a large-scale malicious operation targeting the Ruby ecosystem. The threat actors leveraged vulnerabilities in RubyDoc infrastructure to gain remote code execution capabilities, subsequently uploading over 2,000 compromised packages to RubyGems. This incident highlights critical vulnerabilities in automated AI systems and supply chain security risks within popular package repositories.

Summary auto-generated by AI from the original publisher's content. Editorial standards.