RubyGems halted new registrations after a major attack involving hundreds of malicious packages, increasing supply chain ...

New account registrations on RubyGems.org have been suspended after threat actors published hundreds of malicious packages.

Threat actors are publishing RubyGems packages that include scrapers targeting public-facing UK government servers, but with ...

New malicious RubyGems packages have been discovered that are being used in a supply chain attack to steal cryptocurrency from unsuspecting users. RubyGems is a package manager for the Ruby ...

RubyGems patched an unsafe object deserialization vulnerability this week that could have allowed attackers to remotely execute code on vulnerable systems. RubyGems, a package of software tools that ...

Ruby Central, the non-profit that recently seized some Ruby open source tools from maintainers, is transferring the repository ownership of RubyGems and Bundler to the Ruby core team. The move appears ...