Following reporting by The Wall Street Journal and the publication of research by Nightingale Collective, we want to clarify what we know about the spam-publishing campaign on rubygems.org in May 2026. We take the security of rubygems.org and the community that depends on it seriously.
Following reporting by The Wall Street Journal and the publication of research by Nightingale Collective, we want to clarify what we know about the spam-publishing campaign on rubygems.org in May 2026.
We take the security of rubygems.org and the community that depends on it seriously.
As described in our May status updates, we temporarily paused new account registrations, blocked and removed the accounts responsible, and yanked more than 500…
The page is ready to read now. The fuller skim-friendly version will appear here automatically.
Following reporting by The Wall Street Journal and the publication of research by Nightingale Collective, we want to clarify what we know about the spam-publishing campaign on rubygems.org in May 2026. We take the security of rubygems.org and the community that depends on it seriously. As described in our May status updates, we temporarily paused new account registrations, blocked and removed the accounts responsible, and yanked more than 500…
The campaign involved newly registered accounts publishing spam packages. Socket previously documented related activity under the name GemStuffer.
Open the app view to save this story, compare related coverage, and continue from the same source.