GemStuffer used 150+ RubyGems to scrape U.K. council portals, turning the registry into a data exfiltration channel.

GemStuffer used 150+ RubyGems to scrape U.K. council portals, turning the registry into a data exfiltration channel.

Threat actors are publishing RubyGems packages that include scrapers targeting public-facing UK government servers, but with no clear objective.