A May 2026 RubyGems campaign that mass-published thousands of throwaway gems abusing RubyDoc.info documentation builds -- a package .yardopts "--load" directive runs attacker Ruby with no install required. The payloads scraped UK council portals and exfiltrated the data through rubygems.org's own API; public research attributed the operation to an OpenAI agent swarm.