#Rubygems

Three endpoints handle millions of requests a day, and most Rubyists have never seen them. In her #RailsWorld talk, @jenshenny of @Shopify opens up the #RubyGems compact index, the hidden API behind every bundle install, and walks through where the format is headed next, including publish cooldowns and smaller native gems.

OpenAI agents tried to steal RubyGems API keys, researchers say. Successful theft is unconfirmed. But the bug is real: a CDN could hand your API key to someone else. How a correct password check could still end in a leak: #bugbounty #chatgpt #rubygems

I published a new Ruby gem Parses exported WhatsApp chats into clean, structured objects If you’ve ever needed to process WhatsApp conversations programmatically, this might help Feedback welcome.. #ruby #rubygems #OpenSource

GemStuffer Abuses 150+ RubyGems to Exfiltrate Scraped U.K. Council Portal Data #Cybersecurity #RubyGems #DataExfiltration #Malware #InfoSec

Pulled 120+ malicious packages from @rubygems today. The target wasn't end users - it was RubyGems itself (XSS, data exfiltration). Reminder: sometimes the registry is the one under attack. #ruby #rubygems #security

TruffleRuby is now the first implementation besides CRuby to pass all of the 2180 #RubyGems' tests, no exclusions!

One thing I can tell you with 100% certainty about today's #RubyGems "legal takeover" scandal is that the technical development of our ecosystem will halt. Many prominent and important contributions driving innovation leaving :( absolutely tragic #ruby

🔥 Breaking: Former #RubyGems maintainers have launched the Gem Cooperative, a community-run RubyGems server with open governance. We spoke with the team behind it. Read the full story on the Socket blog
→ #RubyLang #Ruby #Rails

🚨 OpenAI Agents Linked to RubyGems Campaign That Gained RCE on RubyDoc Servers? A new report links #OpenAI agents to a #RubyGems campaign that gained #RCE on RubyDoc servers. The activity pushed 2,000+ packages, exfiltrated public data, and attempted to steal #API keys! #AIAgent #AI

RubyGems has halted all new account registrations following a massive supply chain attack involving hundreds of malicious packages. Is your Ruby environment safe? #RubyGems #Ruby #SupplyChainAttack #CyberSecurity2026 #InfoSec #DevSecOps #MalwareAlert

Episode #99 - Creating a Basic Gem #ruby #rubygems #programming

Today I Learned: starting from RubyGems 2.4.19, you can define the Ruby version in Gemfile as `ruby file: '.ruby-version'`. #ruby #rubygems #gemfile

🔓We have leveled up security on #RubyGems with the full integration of #WebAuthn as our preferred choice for multi-factor authentication. 🛡️Conveniently defend against account takeovers by setting up a passkey now!

Here's my stance on the current issues around RubyGems and RubyCentral 😢: #ruby #rubygems #rubycentral

RubyGems Suspends New Signups After Hundreds of Malicious Packages Are Uploaded #RubyGems #CyberSecurity #MaliciousPackages #SupplyChainSecurity #SoftwareDevelopment

🦠 Today, we, the @rubygems security team, removed over 260 malicious packages from the registry🥲 Have great holidays and stay safe, everyone! #ruby #rubygems #security #SupplyChain

💥🦠 I've written a short summary of our @rubygems's recent incident involving crypto-rewards potentially distorting OSS contributions. Find out how empty gems and @teaprotocol impact our platform and what we do about it. #ruby #rubygems #security 🔥👨‍🚒🧯

I know that 335 downloads are nothing but... but this is the first time I have released something and my self esteem has been pushed up a bit :) #rubygems #ruby #developers #opensource

Hosted a Startup on Rails event last week on behalf of @inazarova and @whop. We gave away 40 different Ruby Gems as party favors. This pic was taken before the box went up in flames. 'twas lit.

@cnorm35 @inazarova @whop Send pic! Maybe we can find em all….

@jsharkey @cnorm35 @inazarova @whop Scenic gem checking in! 🫡 Manage those database views. Integrate ‘em with your Rails app. #RailsWorld #Rubygems @whop

💎 Just released my first #Ruby gem: Commissar. 📦Commissar is a customizable scanner for detecting potential supply chain compromises in #RubyGems, supporting local and remote gems, plus custom detection rules and severity levels. 🧪 This is an alpha version, so expect bugs.