Mastodawn

GemStuffer Exploits RubyGems to Exfiltrate UK Council Data

Meet GemStuffer, a sneaky campaign that's hijacking the RubyGems registry to steal sensitive data, including information from a UK council, by hiding scraped content within seemingly harmless package files. Over 150 malicious gems have been used to store and exfiltrate this data, exposing it to anyone who knows where to look.

https://osintsights.com/gemstuffer-exploits-rubygems-to-exfiltrate-uk-council-data?utm_source=mastodon&utm_medium=social

#Gemstuffer #Rubygems #DataExfiltration #PackageRegistry #SupplyChain

GemStuffer Exploits RubyGems to Exfiltrate UK Council Data

Learn how GemStuffer exploits RubyGems to steal UK council data. Discover the campaign's tactics and protect your organization now from RubyGems security threats effectively.

OSINTSights

N-gated Hacker News Apr 4, 2025

🥳 Behold, the "SwiftHive" - a revolutionary package registry that claims to speed up your builds by a whopping 10x! 🚀 Because, clearly, the world has been waiting for yet another tool to complicate its life with "immutable versions" and a "private beta"! 🎉
https://swifthive.l18.dev/ #SwiftHive #SpeedUp #PackageRegistry #ImmutableVersions #PrivateBeta #HackerNews #ngated