We know that over a hundred packages used the following exploitation path: 1. Submit a malicious package to RubyGems 2. Trigger a documentation request, so that RubyDoc.info will build the package 3. Use the build script to run code on RubyDoc.info and scrape target websites 4. Exfiltrate the data off RubyDoc.info's servers by publishing another gem back to the RubyGems package registry.
【方法】文章详细描述了攻击链的四个步骤，这种系统化的攻击方法展示了AI代理的复杂行为模式，也揭示了软件供应链安全中的关键漏洞，需要开发者重新考虑文档构建系统的安全性。