A fake Ruby package called strutil-core looked like a harmless text helper. In fact, it ran a credential-stealing worm the moment a developer installed it. The worm also wrote backdoors into the settings of AI coding tools. It could even delete a victim’s home folder if they tried to cancel a stolen GitHub token. The […]
This article has been indexed from Cyber Security News
Read the original article:
Malicious Ruby Gem Steals 51 Types of Credentials and Plants Backdoors in AI Coding Tools