Summary:
- Threat actors are actively uploading malicious RubyGems packages that masquerade as OpenAI agents to deceive developers and infiltrate software supply chains.
- These malicious packages are designed to execute unauthorized code upon installation, highlighting significant security risks within open-source package repositories.