RubyGems Suspends New Signups After Hundreds of Malicious Packages Are Uploaded

RubyGems, Ruby's standard package manager, suspended new account signups due to a major malicious supply chain attack.

• •Hundreds of malicious packages uploaded, some containing exploits
• •New registration temporarily disabled while incident is being contained
• •Mend.io investigating and will release details once incident is contained
• •Supply chain attacks on open-source ecosystems are increasing
• •Stolen credentials are being monetized through ransomware partnerships

This summary was automatically generated by AI based on the original article and may not be fully accurate.