🧰 fastlane-plugin-run_tests_firebase_testlab

The items that name it 2

• SleeperGem: Compromised git_credential_manager, Dendreo, and fastlane RubyGems Drop a Persistent Backdoor
  writeup2026-07-19It is written here as fastlane-plugin-run_tests_firebase_testlab (RubyGem).

  Compromised fastlane plugin; new release years after prior version 0.3.1, with no matching GitHub tag; confirmed to contact the same C2 host as the other compromised gems.

• SleeperGem: RubyGems supply chain attack targets dormant maintainer accounts
  writeup2026-07-19

  Unrelated gem with 574,661 total downloads, belonging to a different maintainer than the other compromised gems; a new malicious version was published, suggesting compromise beyond a single account.