• Platform
    Rubygems supply chain attack: malware used as a credential exfiltration dead drop - ai
    Mend AI Secure AI powered applications
    Rubygems supply chain attack: malware used as a credential exfiltration dead drop - icon mend ai native appsec platform
    Mend AppSec Secure your code
    Rubygems supply chain attack: malware used as a credential exfiltration dead drop - sca
    Mend SCA Decrease open source risk
    Mend sast icon
    Mend SAST Secure proprietary code 10x faster
    Rubygems supply chain attack: malware used as a credential exfiltration dead drop - renovate
    Mend Renovate Automate dependency updates
    Expand AppSec coverage
    Rubygems supply chain attack: malware used as a credential exfiltration dead drop - dast icon 1 DAST Rubygems supply chain attack: malware used as a credential exfiltration dead drop - apis icon 1 API security Rubygems supply chain attack: malware used as a credential exfiltration dead drop - eol icon EOL support
    Platform Benefits
    Rubygems supply chain attack: malware used as a credential exfiltration dead drop - repoi icon Repo integration Scalability-icon Scalability Rubygems supply chain attack: malware used as a credential exfiltration dead drop - reachability icon Reachability
  • Solutions
    Ai models risk - nav bar icon
    AI app security Manage risks in AI models and agents
    Ai-red-teaming-icon-
    AI red teaming Test and secure conversational AI
    Rubygems supply chain attack: malware used as a credential exfiltration dead drop -
    System prompt hardening Prevent prompt injection and misuse
    Rubygems supply chain attack: malware used as a credential exfiltration dead drop - ai
    AI-BOM AI component inventory
    Sbom - nav bar icon
    SBOM Move from static to effective SBOMs
    Rubygems supply chain attack: malware used as a credential exfiltration dead drop - ai based remediation icon
    AI based remediation workflows Automate remediation with AI
    Rubygems supply chain attack: malware used as a credential exfiltration dead drop - ai gen code security nav bar icon 36x36 1
    AI gen code security Real-time AI code security
    Runtime-security-nav-bar-icon
    Dynamic testing Test for risks in running applications
    Rubygems supply chain attack: malware used as a credential exfiltration dead drop - compliance nav bar icon 36x36 3
    Compliance Security compliance coverage
    Code scanning - nav bar icon
    Code scanning Find and fix known vulnerabilities
    Open source license nav bar icon
    Open source security Prevent. Prioritize. Automate.
    Open source license - nav bar icon
    Open source compliance Risk management for OSS licenses
    Dependency updates - nav bar icon
    Dependency updates Reduced risk, better code
    Software supply chain - nav bar icon
    Software supply chain security Ensure build integrity
    Container security container security
    Container security Container security, simplified
  • Why Mend
  • Company
    About us - nav bar icon
    About us Who we are
    Careers nav bar icon
    Careers Join our team
    Partners - nav bar icon
    Partners Meet our partners
    Events - nav bar icon
    Events Upcoming events
    Newsroom - nav bar icon
    Newsroom The latest Mend.io news
    Contact-us nav bar icon
    Contact us Connect with us
  • Resources
    Resource center - nav bar icon
    Resource center View our latest resources
    Blog - nav bar icon
    Blog The latest AppSec news and insights
    Podcast-icon
    Podcast Insights from leading experts
    Customers - nav bar icon
    Customers View our customer case studies
    Integrations - nav bar icon
    Integrations Find your integration
    Langugages nav bar icon
    Languages Find your language
    Vulnerability database - nav bar icon
    Vulnerability database Mend.io's OSS vulnerability database
    Documentation - nav bar icon
    Documentation Product and feature documentation
    FEATURED
    Rubygems supply chain attack: malware used as a credential exfiltration dead drop - ai security governance guide
    AI Security Governance: A Practical Framework for Security and Development Teams
    Rubygems supply chain attack: malware used as a credential exfiltration dead drop - the complete guide to open source ai licensing 2026
    The Complete Guide to Open Source & AI Licensing 2026
    Rubygems supply chain attack: malware used as a credential exfiltration dead drop - roi whitepaper featured image
    ROI of Automated Dependency Management with Mend Renovate Enterprise
    Rubygems supply chain attack: malware used as a credential exfiltration dead drop - red teaming practical guide
    AI Red Teaming Practical Guide
    Rubygems supply chain attack: malware used as a credential exfiltration dead drop - icon guides

    Guides

    AI security

    Protect AI models, data, and systems

     AI red teaming

    Test for behavioral risks in conversational AI

     LLM security

    Mitigating risks and future trends

     Application security

    AppSec types, tools, and best practices

     Dependency management

    Automating dependency updates

     SCA

    Manage open source code

     SAST

    Keep source code safe

     Software bill of materials

    Improve transparency, security, and compliance

     Application security testing

    Pre-production scanning and runtime protection

     Container security

    Secure containerized applications
    See all guides
Schedule a Demo
Blog Maciej Mensfeld

RubyGems supply chain attack: malware used as a credential exfiltration dead drop - 20170623 Pivorak 001 e1630576965224
Maciej Mensfeld Principal Product Architect

Maciej Mensfeld writes mostly about Supply Chain Security and Open Source Software. He is the creator of the Diffend security platform. He has over 16 years of experience designing and building systems with performance, scaling, and quality in mind. He is an active OSS contributor and maintainer of various projects.
RubyGems supply chain attack: malware used as a credential exfiltration dead drop - Featured image Rubygems attack 1000x650

RubyGems supply chain attack: malware used as a credential exfiltration dead drop

Maciej Mensfeld Jul 1, 2026
Malicious Packages

RubyGems supply chain attack: stolen credentials hidden in the registry.

Read More
RubyGems supply chain attack: malware used as a credential exfiltration dead drop - Mend securing RubyGems

Inside the RubyGems Supply Chain Attack: How Mend Defender Caught a Coordinated Flood Before It Spread

Maciej Mensfeld May 14, 2026
Malicious Packages

How Mend.io caught a coordinated RubyGems attack and what it teaches us.

Read More
RubyGems supply chain attack: malware used as a credential exfiltration dead drop - AI and AWS blog 1

Next-Gen Vulnerability Assessment: AWS Bedrock Claude in CVE Data Classification

Maciej Mensfeld Jul 30, 2024
AI Models Risk

Explore LLMs in cybersecurity research: analyzing vulnerability data, sifting through CVE information, and enhancing digital safety.

Read More
RubyGems supply chain attack: malware used as a credential exfiltration dead drop - what existing security threats do AI and LLMs amplify post

What Existing Security Threats Do AI and LLMs Amplify? What Can We Do About Them?

Maciej Mensfeld Jan 18, 2024
AI Models Risk

Learn about the existing security threats that AI and LLMs amplify and how to protect against them.

Read More
RubyGems supply chain attack: malware used as a credential exfiltration dead drop - what new security threats arise from the boom in ai and llms

What New Security Threats Arise from The Boom in AI and LLMs?

Maciej Mensfeld Nov 15, 2023
AI Models Risk

Explore the security threats arising from the boom in AI and LLMs, including data privacy, misinformation, and resource exhaustion.

Read More
RubyGems supply chain attack: malware used as a credential exfiltration dead drop - npm Massive Dependency Confusion Attack

Cybercriminals targeted users of packages with a total of 1.5 billion weekly downloads on npm

Maciej Mensfeld Oct 2, 2022
Malicious Packages

Stay informed about the latest supply chain security incident targeting npm users. Learn about the malicious packages and more.

Read More
RubyGems supply chain attack: malware used as a credential exfiltration dead drop - npm Massive Dependency Confusion Attack

Popular Cryptocurrency Exchange dYdX Has Had Its NPM Account Hacked

Maciej Mensfeld Sep 23, 2022
Malicious Packages

dYdX, a popular cryptocurrency exchange, had its NPM account hacked in a supply chain attack. Learn how to protect against similar attacks.

Read More
RubyGems supply chain attack: malware used as a credential exfiltration dead drop - How to Conquer Remote Code Execution RCE in npm

How to Conquer Remote Code Execution (RCE) in npm

Maciej Mensfeld Jul 19, 2022
Malicious Packages

Learn how to conquer Remote Code Execution (RCE) attacks in npm. Find out why npm is susceptible, the threats of RCE, and more.

Read More
RubyGems supply chain attack: malware used as a credential exfiltration dead drop - RubyGems Critical CVE 2022 29176

Impact Analysis: RubyGems Critical CVE-2022-29176 Unauthorized Package Takeover 

Maciej Mensfeld May 10, 2022
Malicious Packages

Impact Analysis of RubyGems Critical CVE-2022-29176 Unauthorized Package Takeover. Learn about the vulnerability, impact assessment, and more

Read More
RubyGems supply chain attack: malware used as a credential exfiltration dead drop - How To Mitigate Ruby Supply Chain Security Risks

Best Practices For Managing Ruby Supply Chain Security Risks

Maciej Mensfeld Mar 3, 2022
Software Supply Chain

Understand the types of Ruby supply chain attacks. Learn the best practices for preventing supply chain security risks in your Ruby projects.

Read More
RubyGems supply chain attack: malware used as a credential exfiltration dead drop - Five Critically Important Facts About npm Package Security

Five Critically Important Facts About npm Package Security

Maciej Mensfeld Feb 8, 2022
Open Source Security

Learn about the five critical facts about npm package security, including how attackers exploit trust, default behaviors, and dependency hell.

Read More
RubyGems supply chain attack: malware used as a credential exfiltration dead drop - malicious package npm

A Malicious Package Found Stealing AWS AIM data on npm has Similarities To Capital One Hack

Maciej Mensfeld Feb 2, 2022
Malicious Packages

Discover how a malicious package found stealing AWS AIM data on npm has similarities to the Capital One hack. Learn about the threat.

Read More
RubyGems supply chain attack: malware used as a credential exfiltration dead drop - The Source series

Popular JavaScript Library ua-parser-js Compromised via Account Takeover

Maciej Mensfeld Oct 22, 2021
Malicious Packages

Popular JavaScript library ua-parser-js was compromised via account takeover, releasing malicious versions.

Read More
RubyGems supply chain attack: malware used as a credential exfiltration dead drop - The Source series

Securing Your Package Manager’s Lockfiles

Maciej Mensfeld Sep 2, 2021
Software Supply Chain

Learn how to secure your package manager's lockfiles to protect your application from supply chain risks and ensure version consistency.

Read More
RubyGems supply chain attack: malware used as a credential exfiltration dead drop - The Source series

How Packages’ External Resources Threaten Your Supply Chain

Maciej Mensfeld Jul 15, 2021
Software Supply Chain

Learn how external resources in packages can threaten your supply chain security, & discover ways to mitigate these risks to protect your org.

Read More
RubyGems supply chain attack: malware used as a credential exfiltration dead drop - The Source series

Supply Chain Security — 10 Tips That Won’t Slow Development Down

Maciej Mensfeld Jun 10, 2021
Software Supply Chain

Learn how to protect your software development process from supply chain attacks with these 10 tips that won't slow down your development.

Read More
Previous
1 2
Next

Subscribe to our Newsletter

Join our subscriber list to get the latest news and updates

Thanks for signing up!