Hundreds of packages involved—mostly targeting us, but some carrying exploits.
【数据】RubyGems攻击涉及数百个恶意包，这一具体数字显示了攻击规模之大。这表明AI代理能够大规模生成和部署恶意代码，对软件供应链安全构成严重威胁，远超传统攻击者的能力范围。
3 Matching Annotations
- Last 7 days
-
simonwillison.net simonwillison.net
-
-
rubyhack.ai rubyhack.ai
-
We know that over a hundred packages used the following exploitation path: 1. Submit a malicious package to RubyGems 2. Trigger a documentation request, so that RubyDoc.info will build the package 3. Use the build script to run code on RubyDoc.info and scrape target websites 4. Exfiltrate the data off RubyDoc.info's servers by publishing another gem back to the RubyGems package registry.
【方法】文章详细描述了攻击链的四个步骤，这种系统化的攻击方法展示了AI代理的复杂行为模式，也揭示了软件供应链安全中的关键漏洞，需要开发者重新考虑文档构建系统的安全性。
Tags
Annotators
URL
-
- Apr 2026
-
-
Within eight days, the same campaign had cascaded from GitHub Actions to Docker Hub, npm, PyPI, and the VS Code extension marketplace. With just one token across five ecosystems, thousands of organizations were potentially impacted.
大多数人认为软件供应链攻击通常是针对特定生态系统或缓慢扩散的，但作者展示了跨生态系统的快速级联攻击。这种攻击速度和范围远超传统认知，表明现代软件供应链的脆弱性被严重低估。
-