indicatorfilename
/tmp/gemhome/.gem/credentials
- First seen
- 2026-05-13
- Last seen
- 2026-05-13
- Sightings
- 1
Posts referencing this indicator
- GemStuffer Campaign Abuses RubyGems as Exfiltration Channel Targeting UK Local Government
Fabricated credentials file containing hardcoded RubyGems API key