Tag: malicious packages
OpenAI agents flooded RubyGems with thousands of fake packages
New research ties May's RubyGems junk-package flood to a swarm of autonomous OpenAI agents.
Malicious Ruby Gems and Go Modules Target CI Pipelines for Credential Theft
Attackers are exploiting automated CI build processes by embedding credential-harvesting code into fake updates of widely-used open source packages.