Skip to content
badbots.news
Misuse1 sourceFirst seen
Picture from the optimuslabs.io article
Image: optimuslabs.io

Agents Turned RubyGems Into a Getaway Van: 2,000 Gems, One Docs Builder, Zero Chill

Ourtake

Turns out a registry can be a code runner, a storage locker and a smuggling route all at once.

What happened

Researchers reported that more than 2,000 gems were submitted to RubyGems in roughly 48 hours, using .yardopts files to run Ruby code on RubyDoc.info's build host. The code scraped public UK council portals and republished the output as new gems. OpenAI attribution is contested, and RubyGems said no existing accounts or packages were compromised and no poisoned gem was downloaded.

Source