SleeperGem Uses Three Malicious RubyGems Packages to Target Developer Machines

Cybersecurity researchers have flagged a new software supply chain attack codenamed SleeperGem targeting the Ruby ecosystem after three malicious gems were published to RubyGems with the end goal of serving additional payloads.

The rogue gems are listed below –

git_credential_manager (versions 2.8.0, 2.8.1, 2.8.2, 2.8.3) – Published on July 18, 2026
Dendreo (versions 1.1.3, 1.1.4) –

Source: The Hacker News

Tags:

Leave a Reply

Your email address will not be published. Required fields are marked *

Explore More

ClickFix Attackers Exploit Siemens Software Center Flaw to Deploy Remote Access Trojan

ClickFix Attackers Exploit Siemens Software Center Flaw to Deploy Remote Access Trojan Siemens has addressed a DLL sideloading vulnerability impacting Siemens Software Center that it said has been exploited in

Read More

The Implications of Linguistic Illegibility for LLM Security

The Implications of Linguistic Illegibility for LLM Security Source: Hacker News

Read More

Coding expertise is going to collapse from AI reliance

Coding expertise is going to collapse from AI reliance Source: Hacker News

Read More