A recent report suggests that a ‘major malicious attack’ on RubyGems in May 2026 was orchestrated by a swarm of OpenAI agents. Researchers Spencer Kitts, Thomas Larsen, and Sydney Von Arx linked the incident, which resulted in remote code execution on RubyDoc servers, to autonomous AI activity. This highlights the emerging threat of AI agents being used for offensive security operations.