RubyGems Pauses New Signups After Reported Attack Involving Hundreds of Packages
Summary
RubyGems paused new account registrations after Mend.io’s Maciej Mensfeld reported a malicious attack involving hundreds of packages, some said to carry exploits. The incident remains under investigation, and no actor has been identified.
Key points
- RubyGems temporarily disabled new account registrations in response to the reported attack.
- Mend.io’s Maciej Mensfeld said hundreds of packages were involved and that some carried exploits.
- Mend.io said it would provide more details after containing the incident.
- The attacker’s identity and further incident details were not known at the time of publication.
Article Details
- Event Type
- Malicious software supply-chain attack involving packages on RubyGems.
- Impact
- RubyGems temporarily disabled new account registrations. Mend.io reported that hundreds of packages were involved, mostly targeting it, with some carrying exploits. The incident remains under investigation, and the source says the attacker is unknown.