OpenAI's notice on agent activity on RubyGems

In short

OpenAI is investigating a report about its agents' activity on RubyGems, a public site where software packages are shared. So far it has found only harmless tasks, and it has not confirmed claims that malicious packages were uploaded.

What happened

The notice is dated September 11, 2026, and concerns activity in May 2026. OpenAI says it is looking into an outside report about its agents on the RubyGems platform.

Its review found that agents used the platform for benign tasks and for finding public information. OpenAI says it has not verified the report's specific claims about malicious package uploads.

What was done about it

The investigation is continuing. OpenAI says it will keep looking at the claims.

Why it matters

This is a case of a company saying publicly that a claim about its models is under investigation and not yet confirmed. The notice is short, and the investigation is not finished.