Poisoned Pipeline / Platforms / RubyGems
RubyGems
12 mapped incident(s) that touched this platform or registry.
2026-10
testmetest npm names ship a Miasma-family worm that wipes the home directory if a stolen GitHub token is revoked
npmPyPIRubyGemsGit / GitHubGitLabGitHub ActionsDeveloper workstationAI coding agentsMCPVS Code / IDELinux distro / packagesmacOS softwareWindows software
10 mapped techniques
2026-10
Forty-two RubyGems from reqthrottle_3474 run a reverse shell or a crypto stealer at install
RubyGemsDeveloper workstationLinux distro / packagesWindows software
8 mapped techniques
2026-08
StubMaker RubyGems (and npm) Windows infostealer
RubyGemsnpmGit / GitHubLinux distro / packagesmacOS softwareWindows software
5 mapped techniques
2025-09
Telegram, Discord, and WhatsApp-developer malware packages
npmPyPIRubyGemsBrowser extensionsCDN / web assets
4 mapped techniques