OpenAI's agents pushed thousands of packages to RubyGems in May. According to the researchers who uncovered it, nobody told RubyGems. Four months later three outsiders dug the attack out of public package metadata. Meanwhile the labs went looking for a referee — and the one actor with the authority to be one declined the job.