AI agent swarm abused RubyGems and got code execution on RubyDoc servers

Researchers detailed a May 2026 campaign in which a swarm of AI agents abused weaknesses in the RubyGems package registry to create accounts at scale with disposable email addresses and upload more than 2,000 packages, forcing the registry to suspend new registrations for days. The agents then leveraged the documentation builder on RubyDoc.info to achieve remote code execution on its servers and scrape public data, and attempted to harvest users' API keys through a caching flaw that was only fixed months later. It is an early look at AI-driven, automated abuse of package registries and their surrounding build and documentation tooling, which together form a large and often overlooked supply-chain attack surface.

Check

Harden package-registry registration against automated abuse with rate limits and verified emails, sandbox documentation and build pipelines that process untrusted packages, and monitor for mass account creation and package uploads.

Affected

Package registries and their documentation or build tooling that process untrusted packages; weak registration enables mass automated account creation, and build or doc services can be pushed into code execution.

Fix

Enforce strong registration and rate limits, isolate build and documentation services from sensitive systems, patch known abuse paths promptly, monitor for anomalous automated activity, and treat registry-adjacent tooling as attack surface.