Three malicious RubyGems packages were flagged as loaders that fetch second-stage payloads, evade CI systems, and install a persistent daemon on developer machines.
Version 2.8.3 of fake gem git_credential_manager goes furthest: it launches a background binary, adds cron and systemd persistence, checks sudo access, and can plant a setuid root shell at /usr/local/sbin/ping6.
Five packages were tied into the spread chain, and researchers said direct registry publishes without matching source commits or tags suggest at least two maintainer accounts were compromised, including long-dormant ones.
Users who installed the gems were told to treat machines and secrets as compromised, remove ~/.local/share/gcm/, delete persistence mechanisms, check for the rogue ping6 shell, and rotate credentials.
The disclosure adds to mounting RubyGems abuse after dozens of spam packages, 150 gems used as an exfiltration channel, and 14 packages recently linked to stolen credential storage.
Are the SleeperGem and Miasma attacks the work of the same sophisticated threat actor group?
With AI coding assistants now an attack vector, how do we prevent them from installing the next malicious package?
As attacks now bypass pipeline scans, is kernel-level interception the only way to secure developer machines?
SleeperGem Attack Exposes 7-Year-Old Dormant RubyGems Accounts in Major 2026 Supply Chain Breach
Overview
In July 2026, the RubyGems ecosystem was hit by the SleeperGem Attack, a major supply chain incident first reported and analyzed by Aikido Security. Attackers specifically targeted RubyGems maintainer accounts that had been dormant for six or seven years, taking advantage of their harmless appearance to hijack them without immediate detection. By leveraging the trust in these inactive accounts, the attackers published malicious code into existing gems, making the compromise difficult to spot. This incident highlights the risks of relying on long-unused accounts and the need for stronger security measures in open-source software ecosystems.