Technology ❯ Cybersecurity ❯ Supply Chain Security

Software Supply Chain

Ruby Ecosystem npm Packages Vulnerabilities

Self-Publishing 'IndonesianFoods' Worm Floods npm With More Than 100,000 Spam Packages

The campaign exploits a manual-execution script to bypass common npm security checks.

Ruby Central Assumes Temporary Administrative Control of RubyGems and Bundler