Comment

Comment by benmanns

The current title is "Rubygems.org compromised." Isn't this just a gem that exploits the YAML bug, not an exploit on RubyGems.org? I believe this submission needs a title change.

Edit: I am incorrect. It seems that this uploaded gem was used to compromise RubyGems.org.

parent benmanns 13 years ago

Discussion

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton