Tag: RubyGems

Researchers uncovered a large-scale RubyGems credential-stealing campaign targeting developers with malicious packages disguised as useful automation tools. Attackers achieved over 275,000 downloads since the campaign began in March 2023, exposing thousands of users to serious data theft risks. Sixty Malicious Gems Discovered Security researchers identified sixty malicious RubyGems packages uploaded by threat actors using aliases…