SleeperGem: RubyGems supply chain attack targets dormant maintainer accounts
aikido.dev | incident | #supply-chain | #featured | #ruby | #incident-response | #malware | #credential-theft | #rubygems | #aikido | #dropper
Summary
It's not often we see a supply chain attack on RubyGems. But with summer vacations in full swing, perhaps we should have expected one. It was still a surprise when I opened the triage queue this morning and found a suspicious new package waiting.
- Published
- Collected
--- id: 4607 title: "SleeperGem: RubyGems supply chain attack targets dormant maintainer accounts" source_domain: aikido.dev source_url: "https://www.aikido.dev/blog/sleepergem-rubygems-supply-chain-attack" published_at: "2026-07-19 00:00" tags: ["supply-chain", "featured", "ruby", "incident-response", "malware", "credential-theft", "rubygems", "aikido", "dropper"] phying_url: "https://phying.com/item/4607" lang: en --- # SleeperGem: RubyGems supply chain attack targets dormant maintainer accounts ## Summary It's not often we see a supply chain attack on RubyGems. But with summer vacations in full swing, perhaps we should have expected one. It was still a surprise when I opened the triage queue this morning and found a suspicious new package waiting. ## Intelligence Metadata - **Sources:** aikido.dev - **Published:** 2026-07-19 00:00 - **Original:** https://www.aikido.dev/blog/sleepergem-rubygems-supply-chain-attack - **Phying News:** https://phying.com/item/4607