Ghost Dev
Named by 2 kept items in this workspace.
Search every workspace for Ghost Dev. It matches the name as written, so it can find other things that share it.
The items that name it 2
Single RubyGems account that published 42 malicious crypto/Web3-targeting gems, flagged by OpenSourceMalware's automated detection.
RubyGems profile alias of user reqthrottle_3474; published 42 malicious typosquat packages targeting crypto and web3 developers
All threat actors in this workspace.