136 Malicious RubyGems Packages Deploy XMRig Miner and Spread via SSH

A large-scale supply chain attack has flooded RubyGems with 136 trojanized packages that deploy an XMRig Monero miner and self-propagate via SSH, underscoring systemic weaknesses in language ecosystems beyond npm and PyPI. On July 22, 2026, researchers Moe Ghasemisharif, Ruian Duan, Zhanhao Chen, and Daiping Liu documented a coordinated cryptojacking campaign abusing RubyGems as the […]

The post 136 Malicious RubyGems Packages Deploy XMRig Miner and Spread via SSH appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.