🧰 Dendreo

The items that name it 2

• SleeperGem: Compromised git_credential_manager, Dendreo, and fastlane RubyGems Drop a Persistent Backdoor
  writeup2026-07-19It is written here as Dendreo (RubyGem).

  Compromised gem, dormant for nearly six years before publishing two malicious versions on the same day.

• SleeperGem: RubyGems supply chain attack targets dormant maintainer accounts
  writeup2026-07-19

  Gem first published in 2017; two new malicious versions published around the same time as git_credential_manager, with git_credential_manager added as a dependency.