SleeperGem: RubyGems supply chain attack targets dormant maintainer accounts

SleeperGem: two dormant RubyGems maintainer accounts were hijacked to inject malware into trusted gems, one with over 500,000 total downloads

Read in full here:

https://www.aikido.dev/blog/sleepergem-rubygems-supply-chain-attack