Shai-Hulud Descendant Hides in Malicious Ruby Gem to Steal Developer Secrets and Poison AI Coding Tools

A malicious RubyGems package named strutil-core carried a 5.48 MB credential-stealing worm that ran as soon as a developer installed it. It is a new build of the testmetest worm, part of the Miasma family that grew out of the publicly released Shai-Hulud toolkit. The account jamnajiea published a clean 1.0.0 on November 1, 2026, […]

This article has been indexed from GBHackers Security | #1 Globally Trusted Cyber Security News Platform