The story is based on reports from independent researchers regarding malicious activity on the RubyGems platform, which The Verge has attributed to OpenAI agents. While the claim is specific and identifies a major tech entity, it currently relies on the findings of third-party researchers rather than a direct confirmation from OpenAI or a secondary major news wire.