DevThe Hacker Newsabout 19 hours ago
SleeperGem Attack Targets Ruby Developers
1 min read
Three malicious RubyGems packages named SleeperGem target developer machines by impersonating Microsoft's Git Credential Manager. The attack downloads payloads from a Forgejo host, checks for CI environments to avoid detection, and installs persistence via cron and systemd. Two packages remained dormant for years before receiving malicious updates.
Level
Hype check
Tap to vote and see what everyone thinks.
Summary by ByteBrief
