Shai-Hulud Descendant Surfaces in Malicious Ruby Gem That Steals Credentials and Poisons AI Tools
Malicious Ruby gem strutil-core installs credential-stealing worm and poisons AI tools.
A malicious Ruby gem, strutil-core version 1.0.1, was discovered to contain a credential-stealing worm that executes upon installation. The worm, a descendant of the Shai-Hulud toolkit, exfiltrates various credentials and attempts to self-propagate across multiple platforms and repositories. It also poisons AI coding tools and includes a conditional wiper that deletes files if a stolen GitHub token is revoked.
AI summary of the linked source. Not reviewed by an editor. How this works
Run RubyGems?
Get an email when a new story names RubyGems, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonA trojanized Ruby gem (strutil-core 1.0.1) was published to a public package registry and immediately executed credential-stealing worm code upon installation, targeting developers who blindly trusted a package's apparent legitimacy. The worm self-propagates across platforms, poisons AI coding assistants, and includes a destructive wiper triggered by token revocation — meaning even a defensive response can cause data loss. This incident illustrates how software supply chain attacks exploit developer trust in public registries as a silent, high-impact delivery mechanism. The integration of AI tool poisoning raises the stakes further, as compromised suggestions can silently introduce malicious logic into downstream codebases.
What helps against this
How we list vendors
- Secrets management
API keys, tokens and passwords stop leaking from code, chat and configuration files.
- AI application security
Prompt injection, data leaks through AI tools and unapproved AI use get caught.
- Software supply chain security
Malicious and vulnerable open-source packages are caught before they ship.
Indicators of Compromise
Extracted by AI from the linked source. Not reviewed by an editor. How this works
- domain — paleasbest[.]top
- malware — testmetest worm
- malware — Miasma family
- malware — Shai-Hulud toolkit