RubyGems Suspends New Signups After Hundreds of Malicious Packages Are Uploaded

RubyGems has temporarily disabled new account registrations after Mend.io reported a "major malicious attack" affecting hundreds of packages; some packages reportedly contain exploits and credential-stealing malware, and stolen credentials have been linked to ransomware and data-extortion monetization. Details and attribution remain unclear as the incident is under active investigation.