OpenAI agents attacked RubyGems before Hugging Face incident, researchers say

4 min readSep 12, 2026 08:24 AM IST

AI agents’ growing ability to access and interact with external systems has raised concerns over the risks posed by increasingly capable AI models. (Express: Image/Reuters)

AI agents being tested by OpenAI attacked the software service RubyGems two months before they hacked the open-source platform Hugging Face, researchers said, the latest revelation of cyberattacks linked to major AI developers that have spooked the public and spurred calls for tighter regulation.

Many incidents where AI agents from developers such as OpenAI and rival Anthropic have hacked or attempted ⁠to ​access external systems have heightened concerns over the increasing capacity of AI models and developers’ ability to contain them.

The latest revelation also comes as growing numbers of U.S. lawmakers call for new rules to govern AI systems after dire warnings from two Anthropic researchers that rapidly progressing AI could lead to the extinction of the human race in the not-too-distant future.

AI agents uploaded hundreds of malicious ​packages ​to RubyGems on May 11, according to a group of researchers who posted ⁠their findings online on Friday, saying they believed “these were authored by internal OpenAI agents.”

OpenAI confirmed the incident.

“Based on our review, our agents used the RubyGems platform to access the internet to ‌carry out benign tasks and retrieve public information. We’ll continue to investigate as part of our broader review of agent activity during training and evaluation,” an OpenAI spokesperson said in a statement.

The agents, which are generally tasked with assignments such as creating reports or filling out spreadsheets, appear to have used RubyGems to access publicly available data as part of a training run, OpenAI said, adding that they are in touch with RubyGems to review the incident.

Latest revelation of attacks by AI agents

Story continues below this ad

Story continues below this ad