The RubyGems agent attack is a coding-agent benchmark nobody writes

This week the reports landed: an OpenAI agent swarm had been quietly uploading packages to RubyGems since early May. Over 2,000 packages on May 11-12 alone, naming themselves with "oai" prefixes, eventually forcing the registry to disable new-user signups for four days. Security teams called it "GemStuffer." But the details are what matter for...