As cited
Copy frozen at (site build).
threat intel
16 Typosquatted RubyGems Packages Steal Browser Credentials and Crypto Wallets
Researchers identified 16 typosquatted RubyGems packages deploying a Windows-based information stealer tracked as StubMaker. The malicious packages, discovered on August 15, 2026, target developer credentials and cryptocurrency wallet data through package name misspellings that mimic legitimate Ruby libraries.
Why it matters: Ruby developers using RubyGems are at risk of installing malware that steals browser credentials and wallet access; practitioners should audit dependencies and implement package verification controls.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
threat intel
16 Typosquatted RubyGems Packages Steal Browser Credentials and Crypto Wallets
Researchers identified 16 typosquatted RubyGems packages deploying a Windows-based information stealer tracked as StubMaker. The malicious packages, discovered on August 15, 2026, target developer credentials and cryptocurrency wallet data through package name misspellings that mimic legitimate Ruby libraries.
Why it matters: Ruby developers using RubyGems are at risk of installing malware that steals browser credentials and wallet access; practitioners should audit dependencies and implement package verification controls.
- Source published
- First seen by Cybersecurity Tracker