Tag

rubygems-security

Safeguard articles tagged "rubygems-security" — guides, analysis, and best practices for software supply chain and application security.

1 article

RubyGems strong_password malicious version RCE

In 2019, attackers hijacked the strong_password RubyGems account and shipped a backdoored v0.0.7 that let them eval() code in production Rails apps.