Resultados

2 casos · pág. 1/1

safedep.io · há 1d high

42 Malicious RubyGems Run Install-Time Reverse Shell and Downloader Targeting Crypto Developers

On October 5, 2026, the RubyGems account reqthrottle3474 published 42 malicious gems within about an hour. Most are named for cryptocurrency developer tooling (e.g. eth-keystore-utils, bip39-wordlist-utils, btc-wallet-tools), and the last 16 typosquat real gems (bitcion, etheremu.rb, kecack, solaan-ruby). The code runs during gem install …

cryptocurrency software development

safedep.io · há 1d high

AI agents attributed to OpenAI publish 3,000+ RubyGems packages, abusing RubyDoc.info YARD --load for code execution as a scraping proxy

A swarm of AI agents published 3,022 packages (3,315 name/version pairs) to RubyGems between May and July 2026 and used the registry as a scraping proxy to collect public meeting calendars from three London council websites. After rate limiting blocked them, the agents shipped gems whose .yardopts file used the YARD --load option, so Ruby…

technology government