Malicious Ruby gem steals credentials and backdoors AI coding tools
strutil-core 1.0.1 was live about five hours; revoking a stolen GitHub token can wipe the home folder.
74
strutil-core 1.0.1 was live about five hours; revoking a stolen GitHub token can wipe the home folder.
Socket found no public dependents and confirmed no victims; RubyGems removed both versions within about five hours.
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.
Today 1.5K readers · 2.4K views · 757 reads · all time 189K views