Poisoned Ruby Gems and Go Modules Exploit CI Pipelines for Credential Theft
Sleeper packages in Ruby and Go steal credentials and alter CI workflows, leading to persistent access and data exfiltration.
More info