HomeDefencePoisoned Ruby Gems and Go Modules Exploit CI Pipelines for Credential Theft

Poisoned Ruby Gems and Go Modules Exploit CI Pipelines for Credential Theft

May 1, 2026

A software supply chain attack campaign has been identified using sleeper packages to distribute malicious payloads capable of stealing credentials, tampering with GitHub Actions, and establishing SSH persistence. The activity has been linked to the GitHub account BufferZoneCorp, which published repositories containing malicious Ruby gems and Go modules.

PyTorch Lightning and Intercom-client Hit in Supply Chain Attacks to Steal Credentials

Two Cybersecurity Professionals Get 4-Year Sentences in BlackCat Ransomware Attacks

Most Popular

Privacy Overview

This website uses cookies to improve your experience while you navigate through the website. Out of these, the cookies that are categorized as necessary are stored on your browser as they are essential for the working of basic functionalities of the website. We also use third-party cookies that help us analyze and understand how you use this website. These cookies will be stored in your browser only with your consent. You also have the option to opt-out of these cookies. But opting out of some of these cookies may affect your browsing experience.

Necessary

Always Enabled

Necessary cookies are absolutely essential for the website to function properly. These cookies ensure basic functionalities and security features of the website, anonymously.

Cookie	Duration	Description
cookielawinfo-checkbox-analytics	11 months	This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Analytics".
cookielawinfo-checkbox-functional	11 months	The cookie is set by GDPR cookie consent to record the user consent for the cookies in the category "Functional".
cookielawinfo-checkbox-necessary	11 months	This cookie is set by GDPR Cookie Consent plugin. The cookies is used to store the user consent for the cookies in the category "Necessary".
cookielawinfo-checkbox-others	11 months	This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Other.
cookielawinfo-checkbox-performance	11 months	This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Performance".
viewed_cookie_policy	11 months	The cookie is set by the GDPR Cookie Consent plugin and is used to store whether or not user has consented to the use of cookies. It does not store any personal data.

Functional

Performance

Analytics

Others

Poisoned Ruby Gems and Go Modules Exploit CI Pipelines for Credential Theft

U.S. Army buys more Israeli SMASH counter-drone rifle system

Stockholm fund raises $5.4M to bridge Ukrainian innovation to NATO

New Tu-160M photo confirms Russia’s slow but steady bomber upgrades

Most Popular

North Portugal growing in luxury real estate

Government hires more police for Lisbon and Porto

Portugal real estate market dominated by large homes

Portugal brand wins trademark dispute against Louis Vuitton

Recent Comments

EDITOR PICKS

North Portugal growing in luxury real estate

Government hires more police for Lisbon and Porto

Portugal real estate market dominated by large homes

POPULAR POSTS

North Portugal growing in luxury real estate

Government hires more police for Lisbon and Porto

Portugal real estate market dominated by large homes

POPULAR CATEGORY

ABOUT US

FOLLOW US