Topic
RubyGems
3 stories about RubyGems that passed the news check, newest first.
Release ·
What's new in RubyGems and Bundler 4.1
Ruby Weekly issue #826 (November 12, 2026) features an article on RubyGems and Bundler 4.1.
Ruby Weekly
Security · High impact ·
Shai-Hulud Descendant Surfaces in Malicious Ruby Gem That Steals Credentials and Poisons AI Tools
Malicious RubyGems package strutil-core version 1.0.1 runs a 5.48 MB credential-stealing worm when installed.
Socket
Security · High impact ·
Even gem list can run someone else's code
Ruby gems can run code during installation and on every gem command, including gem list.
Aikido Security's Blog