Menu

#Cooldown

3 posts

Feed·
3 of 3 posts
Cool down before you install: give new gems a few days to be vetted
📰
164

Cool down before you install: give new gems a few days to be vetted

Hacker News·4 months ago
#rznE7nda

Most supply-chain attacks against RubyGems exploit a narrow window: an account is compromised, a malicious version ships, and any bundle install in the minutes that follow resolves straight to it. ...

15s
Read More