RubyGems halted new registrations after a major attack involving hundreds of malicious packages, increasing supply chain risks.