Olly 👾<p>:ruby: <a href="https://nerdculture.de/tags/RubyGems" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>RubyGems</span></a> hit by Malicious Packages stealing Credentials, Crypto & forcing Security Changes</p><p>The malicious gems were published onto RubyGems_org under various aliases over the years. The offending publishers are zon, nowon, kwonsoonje & soonje, spreading the activity over multiple accounts to make the activity harder to trace & block.</p><p><a href="https://socket.dev/blog/60-malicious-ruby-gems-used-in-targeted-credential-theft-campaign" rel="nofollow noopener" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">socket.dev/blog/60-malicious-r</span><span class="invisible">uby-gems-used-in-targeted-credential-theft-campaign</span></a></p><p><a href="https://nerdculture.de/tags/it" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>it</span></a> <a href="https://nerdculture.de/tags/security" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>security</span></a> <a href="https://nerdculture.de/tags/privacy" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>privacy</span></a> <a href="https://nerdculture.de/tags/programming" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>programming</span></a> <a href="https://nerdculture.de/tags/engineer" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>engineer</span></a> <a href="https://nerdculture.de/tags/media" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>media</span></a> <a href="https://nerdculture.de/tags/tech" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>tech</span></a> <a href="https://nerdculture.de/tags/news" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>news</span></a></p>