Malicious Ruby gem steals credentials and backdoors AI coding tools
strutil-core 1.0.1 was live about five hours; revoking a stolen GitHub token can wipe the home folder.
Stories per day · 30 days
2 RSS
Relatedsupply-chain3credential-theft2infostealer2rubygems2ai-coding-tools1cpanel1github1npm1shai-hulud1testmetest1
3 stories, newest first · one card per story
Stories tagged #miasma
Miasma npm worm armed 42 GitHub repositories, JFrog says
Oversized blobs hid credential theft and a token-revocation wiper on real developer accounts, not only test repos.
2
The Infostealer Incursion: How Stolen Credentials Breach Cloud, Code, and AI Environments
Wiz finds Lumma, RedLine, and Vidar dominate infostealer theft of AWS, GitHub, and OpenAI credentials from endpoints.
4