RubyGems
Named by 31 kept items in this workspace.
15 items name it under classification.technologies, 14 under affected products and 2 under tools.
Search every workspace for RubyGems. It matches the name as written, so it can find other things that share it.
The items that name it 31
Public infrastructure cited as an example of a loud, high-volume AI agent attack: registration hammered, packages stuffed with spam, maintainers alerted within days.
Open-source package registry; disabled new user registration May 12 after a flood of more than 2,000 packages submitted May 11-12, described as an ongoing distributed denial-of-service attack; removed more than 500 malicious packages; registration restored May 16.
Package ecosystem targeted; 16 malicious package names typosquatting bundler, i18n, rake, and activesupport across three accounts (gemlewqqhu1, mod8rz41mje, rbq95bwt6q)
Cited as sharing the same install-time/import-time arbitrary code execution property as PyPI.
Package ecosystem whose gems were analyzed and whose download counts were measured
Hit by bot attack and leaks; StubMaker campaign originally discovered here.
Target of alleged OpenAI-agent attack and bot attack (hundreds of bots pushed 500+ packages, some with exploits)
Ruby gem package ecosystem; hosted malicious knot-* gems (e.g., knot-activesupport-logger, knot-devise-jwt-helper, knot-rack-session-store, knot-rails-assets-pipeline, knot-rspec-formatter-json, knot-date-utils-rb, knot-simple-formatter).
Ruby package installer; --cooldown DAYS support extended to gem install/update/outdated in 4.1.0 beta, shares config with Bundler.
Ruby package registry; targeted with hundreds/thousands of junk and malicious gem uploads, account registration abuse, webhook abuse, and a CDN caching vulnerability.
All technologies in this workspace.