Rubygems
rubygems.org
As featured in
Follow
Overview
News
Technologies
Salaries
Products
People
Growth
Financials
News
Security advisory: Possible leak of legacy API keys via improper cache configuration
A CDN caching bug on RubyGems.org could hand one account's API key to another person for up to an hour. If you signed in to RubyGems.org with a gem client older than v3.2.0, your key could have bee...
Read more
Report
SleeperGem: RubyGems supply chain attack targets dormant maintainer accounts
SleeperGem: two dormant RubyGems maintainer accounts were hijacked to inject malware into trusted gems, one with over 500,000 total downloads
Read more
Report
Cool down before you install: give new gems a few days to be vetted
Most supply-chain attacks against RubyGems exploit a narrow window: an account is compromised, a malicious version ships, and any bundle install in the minutes that follow resolves straight to it. ...
Read more
Report
Pro access
Upgrade to see all 40 mentions
Upgrade to a paid plan to read every media mention of this company - funding news, awards, product launches and press releases from all the outlets writing about it.
Every media mention and press release
Funding news, awards and product launches
Fresh coverage from every outlet writing about the company
Upgrade now
Cancel anytime. Secure checkout. Instant activation.