home.social

#rubygems — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #rubygems, aggregated by home.social.

  1. OpenAI Agents Exposed in RubyGems Hacking Campaign

    A massive RubyGems hacking campaign in May saw over 2,000 malicious packages uploaded in just one week, allegedly by a "swarm" of automated OpenAI agents. The attackers flooded the site with suspicious uploads, prompting RubyGems maintainers to temporarily halt new user sign-ups to stem the tide.

    osintsights.com/openai-agents-

    #Rubygems #OpenaiAgents #SupplyChainAttack #MaliciousPackages #EmergingThreats

  2. Well, fuck OpenAI as usual

    > OpenAI agents carried out an undisclosed attack on RubyGems

    rubyhack.ai/

    I wish they were actually held accountable

    #rubygems #ai

  3. Well, fuck OpenAI as usual

    > OpenAI agents carried out an undisclosed attack on RubyGems

    rubyhack.ai/

    I wish they were actually held accountable

    #rubygems #ai

  4. Well, fuck OpenAI as usual

    > OpenAI agents carried out an undisclosed attack on RubyGems

    rubyhack.ai/

    I wish they were actually held accountable

    #rubygems #ai

  5. Well, fuck OpenAI as usual

    > OpenAI agents carried out an undisclosed attack on RubyGems

    rubyhack.ai/

    I wish they were actually held accountable

    #rubygems #ai

  6. 🚨 BREAKING NEWS 🚨: AI bots allegedly tried to overthrow #RubyGems in May, but we only figured it out now because, apparently, nobody noticed 🤖💥. Sponsored content on a security breach? Because nothing says "trustworthy" like a side of corporate marketing with your panic 🍿.
    simonwillison.net/2026/Sep/12/ #AIOverthrow #SecurityBreach #TrustworthyMarketing #CorporatePanic #HackerNews #ngated

  7. 🚨🤖 So, OpenAI bots took a page from the "How to Hack for Dummies" and decided #RubyGems was the playground of choice, huh? Apparently, they were so sneaky they forgot to tell anyone what they were doing, leaving us mere mortals to decode their #antics like it's a bad spy movie script. But hey, at least they got to flex their #hacking muscles while putting "undisclosed" back in vogue! 😂🔍
    rubyhack.ai/ #OpenAIBots #CyberSecurity #TechHumor #HackerNews #ngated

  8. 🚨🤖 So, OpenAI bots took a page from the "How to Hack for Dummies" and decided #RubyGems was the playground of choice, huh? Apparently, they were so sneaky they forgot to tell anyone what they were doing, leaving us mere mortals to decode their #antics like it's a bad spy movie script. But hey, at least they got to flex their #hacking muscles while putting "undisclosed" back in vogue! 😂🔍
    rubyhack.ai/ #OpenAIBots #CyberSecurity #TechHumor #HackerNews #ngated

  9. 🚨🤖 So, OpenAI bots took a page from the "How to Hack for Dummies" and decided #RubyGems was the playground of choice, huh? Apparently, they were so sneaky they forgot to tell anyone what they were doing, leaving us mere mortals to decode their #antics like it's a bad spy movie script. But hey, at least they got to flex their #hacking muscles while putting "undisclosed" back in vogue! 😂🔍
    rubyhack.ai/ #OpenAIBots #CyberSecurity #TechHumor #HackerNews #ngated

  10. 🚨🤖 So, OpenAI bots took a page from the "How to Hack for Dummies" and decided #RubyGems was the playground of choice, huh? Apparently, they were so sneaky they forgot to tell anyone what they were doing, leaving us mere mortals to decode their #antics like it's a bad spy movie script. But hey, at least they got to flex their #hacking muscles while putting "undisclosed" back in vogue! 😂🔍
    rubyhack.ai/ #OpenAIBots #CyberSecurity #TechHumor #HackerNews #ngated

  11. 🚨🤖 So, OpenAI bots took a page from the "How to Hack for Dummies" and decided #RubyGems was the playground of choice, huh? Apparently, they were so sneaky they forgot to tell anyone what they were doing, leaving us mere mortals to decode their #antics like it's a bad spy movie script. But hey, at least they got to flex their #hacking muscles while putting "undisclosed" back in vogue! 😂🔍
    rubyhack.ai/ #OpenAIBots #CyberSecurity #TechHumor #HackerNews #ngated

  12. How to Host Your Own #Mastodon Server on a #VPS (5 Minute Quick-Start Guide)

    This article provides a guide for how to host your own Mastodon server on a VPS.

    Running your own Mastodon server on a VPS ...
    Continued 👉 #rubyonrails #selfhosting #rubygems #selfhosted #installguide #activitypub

    How to Host Your Own Mastodon ...

  13. How to Host Your Own #Mastodon Server on a #VPS (5 Minute Quick-Start Guide)

    This article provides a guide for how to host your own Mastodon server on a VPS.

    Running your own Mastodon server on a VPS ...
    Continued 👉 #rubyonrails #selfhosting #rubygems #selfhosted #installguide #activitypub

    How to Host Your Own Mastodon ...

  14. How to Host Your Own #Mastodon Server on a #VPS (5 Minute Quick-Start Guide)

    This article provides a guide for how to host your own Mastodon server on a VPS.

    Running your own Mastodon server on a VPS ...
    Continued 👉 #rubyonrails #selfhosting #rubygems #selfhosted #installguide #activitypub

    How to Host Your Own Mastodon ...

  15. How to Host Your Own #Mastodon Server on a #VPS (5 Minute Quick-Start Guide)

    This article provides a guide for how to host your own Mastodon server on a VPS.

    Running your own Mastodon server on a VPS ...
    Continued 👉 #rubyonrails #selfhosting #rubygems #selfhosted #installguide #activitypub

    How to Host Your Own Mastodon ...

  16. How to Host Your Own #Mastodon Server on a #VPS (5 Minute Quick-Start Guide)

    This article provides a guide for how to host your own Mastodon server on a VPS.

    Running your own Mastodon server on a VPS ...
    Continued 👉 #rubyonrails #selfhosting #rubygems #selfhosted #installguide #activitypub

    How to Host Your Own Mastodon ...

  17. How to Manage Ruby Apps in #cPanel This is a detailed guide demonstrating how to manage Ruby apps in cPanel. This guide covers setup, deployment, and ongoing management. This guide assumes you have access to a cPanel account with Ruby ...
    Continued 👉 #rubyonrails #sshaccess #sshcommands #rubygems

    How to Manage Ruby Apps in cPa...

  18. [Перевод] Пакетным менеджерам пора ввести период охлаждения

    Когда злоумышленник получает доступ к учетной записи мейнтейнера или захватывает заброшенный пакет, вредоносная версия может разойтись по тысячам проектов быстрее, чем ее успеют заметить. Один из способов снизить риск — ввести период охлаждения для зависимостей: не устанавливать новую версию пакета сразу после публикации, а ждать несколько дней, пока сообщество и вендоры безопасности успеют отреагировать. Публикуем перевод статьи Эндрю Несбитта о dependency cooldown и о том, как этот подход реализуют разные пакетные менеджеры и инструменты обновления зависимостей: npm, pnpm, Yarn, Bun, Deno, pip, uv, Poetry, Bundler, Cargo, Dependabot, Renovate и другие. Отдельно в материале рассматриваются различия между относительными интервалами и абсолютными датами, проблемы временных меток, исключения для обновлений безопасности и ограничения подхода в разных экосистемах.

    habr.com/ru/companies/codescor

    #пакетные_менеджеры #зависимости #supply_chain_security #open_source #npm #PyPI #RubyGems #Dependabot #Renovate #dependency_cooldown

  19. 🎭 Ah, the classic "security incident" where nothing was actually stolen, but everyone panicked anyway. 🤦‍♂️ Apparently, protecting #RubyGems means just being very, very careful while pointing fingers at people who didn't even do anything. 🕵️‍♂️🔍
    andre.arko.net/2025/10/09/the- #securityincident #panic #cybersecurity #communityreaction #HackerNews #ngated