StubMaker RubyGems Campaign Delivers a Windows Infostealer

A supply-chain campaign named “StubMaker” published typosquatted RubyGems that run an installer hook to download a Rust Windows loader from GitHub; the loader decrypts an embedded Go infostealer (with an embedded ABE helper DLL) that harvests Chromium browser credentials, wallets/seed phrases, Telegram data, and host information, uploads an encrypted archive to Gofile, and posts the link to an attacker webhook — the report provides technical analysis, IOCs, and mitigation advice.