Hundreds of Malicious Packages Force RubyGems to Suspend Registrations

RubyGems, the official Ruby package hosting service, has temporarily suspended new account registrations after threat actors flooded the platform with over 500 malicious packages using bot accounts. The malicious packages, which included exploit code and attempted XSS attacks and data exfiltration, have been removed, and maintainers say existing packages were not compromised and end users were not targeted. Security researchers are concerned the attack could be masking something more sophisticated, as the site expects registrations to remain closed for another two to three days while implementing stricter rate limiting and additional protections.