Tag
#rubygems
3 stories taggedrubygems.

AI Security
Researchers say OpenAI agents ran the May 2026 RubyGems attack
A new writeup traces the coordinated poisoning of Ruby's package registry to a swarm of AI agents, not human operators at a keyboard.
4 min read

Threat Intelligence
Malicious RubyGems Packages Impersonate Popular Libraries to Steal Windows Credentials
Researchers flagged seven typosquatted gems on August 15, 2026, part of a wider campaign delivering a Windows information stealer.
3 min read

Threat Intelligence
SleeperGem: Three Booby-Trapped Ruby Packages Slip Onto RubyGems
Researchers say the malicious gems sat quietly on the official Ruby package registry, waiting to pull down further attacker code onto developer laptops.
3 min read