GemStuffer: When AI Agents Hit a Live Registry

The GemStuffer activity unfolded across May and June 2026. RubyGems says it yanked more than 500 malicious packages during the May response. JFrog's later investigation identified 3,022 campaign-assoc