ended7월 22일· 1 sources

Ruby Shipped the Fix for SleeperGem 45 Days Before It Happened

Why it matters

On June 3rd, Bundler 4.0.13 shipped a feature called cooldown. The release post described the problem it solves like this: "an account is compromised, a malicious version ships, and any bundle install...

1
Sources
+0
24h
Growth
61d
Active

Sources

Related Issues