SleeperGem Uses Three Malicious RubyGems Packages to Target Developer Machines
A supply chain attack dubbed SleeperGem is utilizing compromised RubyGems packages to drop persistent backdoors on developer machines.
Velocity
How fast coverage is spreading — measured hourly from article rate × source diversity. How this works →
Where it stands
SleeperGem has targeted developer machines by compromising three RubyGems packages: git_credential_manager, Dendreo, and fastlane. The attack involves the use of malicious packages to establish persistent backdoors.
Coverage from The Hacker News, StepSecurity, and Aikido Security emphasizes that the attack specifically targets dormant maintainer accounts. Additionally, cyberpress.org reports that North Korean hackers are hiding OTTERCOOKIE malware within SVG images to backdoor developers.
Future monitoring will focus on the impact of the compromised RubyGems packages and the distribution of the OTTERCOOKIE malware.
Synthesized by Newsylist from the headlines below under a strict no-invention contract. ✓ fact-checked: all claims supported by sources Updated 44d ago.
The reporting (4)
- North Korean Hackers Hide OTTERCOOKIE Malware in SVG Images to Backdoor Developers cyberpress.org · 47d ago
- SleeperGem: RubyGems supply chain attack targets dormant maintainer accounts Aikido Security · 47d ago
- SleeperGem: Compromised git_credential_manager, Dendreo, and fastlane RubyGems Drop a Persistent Backdoor StepSecurity · 47d ago
- SleeperGem Uses Three Malicious RubyGems Packages to Target Developer Machines The Hacker News · 47d ago broke it first
Answered
Which specific packages were affected by SleeperGem?
The compromised RubyGems packages are git_credential_manager, Dendreo, and fastlane.
How did the SleeperGem attack gain access?
According to Aikido Security, the supply chain attack targeted dormant maintainer accounts.
What role do SVG images play in these reports?
Cyberpress.org reports that North Korean hackers are using SVG images to hide OTTERCOOKIE malware.
People, places & organizations
Topics
Related trends
"The internet we once loved is gone": SteamDB founders announce the community-run database has been acquired by Nexus Mods' owners
Nexus Mods’ purchase of SteamDB transfers the premier Steam data hub to the world’s largest mod‑hosting platform.
Dell’s newest laptop sounds a lot like a MacBook Neo
Dell’s new 14‑inch 14S laptop, unveiled at IFA 2026, mirrors Apple’s MacBook Neo and targets budget‑conscious students.
Alienware launches 32-inch 4K Tandem WOLED monitor for $699 and 560Hz QD-OLED model
Alienware’s surprise September launch of a $699 32‑inch 4K OLED monitor with a record‑breaking 560 Hz refresh is shaking the gaming display market.
Nintendo Expands Switch Online's NES Library With Three More Titles
Nintendo adds three classic NES games to Switch Online, sharpening its retro appeal for subscribers.
Roku has released its first ever OLED TVs
Roku enters the OLED market with $999 premium TVs, sparking price contrasts with its $499.99 QLED Mini‑LED models
TP-Link’s first Wi-Fi 8 router is almost here
TP-Link unveils its first Wi‑Fi 8 router, Archer 8 Ultra, with preorder slated for 30 September following an IFA 2026 debut.