SleeperGem Uses Three Malicious RubyGems Packages to Target Developer Machines

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2026-07-20 05:15 UTC
  • Importiert: 2026-07-24 14:08 UTC
  • Quelle-ID: thn_global
  • uid_hash: d7a0d184fdb42114ec97e0e4280c57c002993d0e12857d7928939a4a5f5d5eb8
The Hacker News

Inhalt

Cybersecurity researchers have flagged a new software supply chain attack codenamed SleeperGem targeting the Ruby ecosystem after three malicious gems were published to RubyGems with the end goal of serving additional payloads.

The rogue gems are listed below -

git_credential_manager (versions 2.8.0, 2.8.1, 2.8.2, 2.8.3) - Published on July 18, 2026 Dendreo (versions 1.1.3, 1.1.4) -

No data

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
The Hacker News

thn_global

 security_news - de https://feeds.feedburner.com/TheHackersNews
Zurueck zur Eintrags-Liste