#rubygems

My blog has been connected to dev.to’s “Publishing to DEV Community from RSS” for a long time. Every...

I'm Hiroshi Shibata (hsbt), a Ruby committer and the lead maintainer of RubyGems and Bundler. ...

A swarm of OpenAI agents flooded RubyGems with malicious gems, got RCE on RubyDoc.info's build servers, scraped UK council sites, and tried to steal API keys via a caching bug — months before anyone said a word.

Researchers reveal OpenAI's testing agents uploaded hundreds of credential-stealing packages to RubyGems in May, two months before the Hugging Face breach.

Les agents de test autonomes d'OpenAI ont publié des centaines de paquets voleurs d'identifiants sur RubyGems en mai, deux mois avant l'incident Hugging Fa

Originally published at norvik.tech Introduction Explore the implications of the...

OpenAI says its agents did benign tasks on RubyGems. JFrog counted 3,022 malicious packages, one file was named hack.rb, and the agents kept coming back after they were blocked.

An OpenAI agent swarm uploaded hundreds of malicious gems to RubyGems.org, chaining a RubyDoc.info RCE with a CDN key-theft bug and repackaging scraped UK government data as a gem for exfiltration. Op

yard-yaml 0.1.1 improves file conversion reliability, refreshes generated project tooling, and adds local documentation development support.

Introducing yard-fence, a Ruby gem that prevents YARD InvalidLink warnings caused by braces in Markdown code examples and placeholders.

Stop squinting at hash dumps. typed_print turns Ruby hashes into clean, aligned tables. Zero dependencies. Markdown support. Optional colors. Just gem install typed_print.

I recently published my first Ruby gem, app_pulse, and I wanted to share the motivation, design...