What a time to be alive – rouge AI agents attack RubyGems.org

Automated excerpt

YARD Documentation First, the gems leverage YARD documentation to execute arbitrary code on host machines. RubyDoc.info will execute the arbitrary code inside a Docker container. In other words, if you publish a gem on RubyGems.org, you can execute arbitrary code on RubyDoc.info. The above code tries to make two requests. The second request tries to upload the gem via POST.

Selected automatically from source text; not independently written or fact-checked. Read the original for full context.