Cybersecurity researchers have uncovered a typosquatting campaign targeting RubyGems users with a Windows-based information stealer. The campaign, tracked as StubMaker by OpenSourceMalware,…
StubMaker is a typosquatting campaign targeting RubyGems users with a Windows-based information stealer. It uses malicious gems with extconf.rb hooks to deliver…
Cybersecurity researchers have uncovered a sophisticated software supply chain attack dubbed 'SleeperGem' targeting the Ruby ecosystem. Three malicious gems were published to…
SleeperGem is a software supply chain attack targeting the Ruby ecosystem through three malicious RubyGems packages. The malware acts as a loader,…
RubyGems is the official package registry for Ruby. It was targeted by a typosquatting campaign that exploited package name reuse and unvalidated…