malicious gems
-
Malicious Ruby gems linked to SleeperGem supply chain attack
Researchers said three malicious Ruby gems were published to RubyGems in a supply chain campaign called SleeperGem. The packages were built to load further payloads on developer machines and avoid build systems.
