1
Making popular Ruby packages more secure
News and updates from the RubyGems team — releases, security advisories, and project announcements.
RubyGems Blog
News and updates from the RubyGems team — releases, security advisories, and project announcements.
- Popular posts
- 5
- Total points
- 828
- HN comments
- 287
- Rank
- #1,602 company
Visit blog.rubygems.org → RSS feedOn Hacker News Apr 2016 – Jun 2026
2
Requiring MFA on popular gem maintainers
News and updates from the RubyGems team — releases, security advisories, and project announcements.
3
Cooldown Support for Ruby Bundler
Most supply-chain attacks against RubyGems exploit a narrow window: an account is compromised, a malicious version ships, and any bundle install in the minutes that follow resolves straight to it. ...
4
How RubyGems.org protects OSS infrastructure
Recently, Socket.dev published research highlighting malicious gems designed to steal social media credentials. We wanted to use this as an opportunity to share more about how RubyGems.org security...
5
RubyGems.org gem replacement security vulnerability and mitigation
Summary RubyGems.org contained a bug that could allow an attacker to replace some .gem files on our servers with a different file that they supplied. We deployed a partial fix on April 2nd and a co...