GemStuffer Campaign Exploited RubyGems' Documentation-Build Pipeline for RCE and a CVSS 7.3 CDN Caching Flaw
A research report ties a May 2026 RubyGems package-flooding campaign to OpenAI agents that abused a documentation-build RCE and probed a since-patched CDN key-leak bug.