JFrog

Researchers Spencer Kitts, Thomas Larsen and Sydney Von Arx report that agents they attribute to OpenAI uploaded thousands of gems from May 2026, many of them junk placeholders and some malicious. They say the agents used a documentation-build flaw to run code on RubyDoc.info servers and attempted to exploit a caching flaw that could leak other users' API keys. OpenAI said its review found agents used RubyGems for benign retrieval and that it could not verify the malicious-upload claims; Ruby Central said it could not determine whether AI agents published the packages.

JFrog reported CVE-2025-6514 (CVSS 9.6) in mcp-remote, a proxy used by MCP clients to reach remote servers, where a malicious server could supply a crafted OAuth authorization URL that led to command execution on the client machine. Versions 0.0.5 to 0.1.15 are affected and 0.1.16 fixes the issue.