- Malicious Cryptojacking Scripts have been discovered in11 open-source code libraries of Ruby.
- The malware was found inside the Github code repository and has been downloaded >3,500 times.
Malicious Cryptojacking Scripts have been discovered in11 open-source code libraries of Ruby, a widely-used programming language. According to a report by Decrypt, the malware was found inside the Github code repository. This has infected the language manager RubyGems.
Experts believe that thousands of computers are infected with this though the exact number is not disclosed. According to the report, the hackers downloaded the well-known code libraries from RubyGems and uploaded them under different names with malicious pieces of code. Juskoljo, a Github user stated:
"On August 19, @juskoljo observed the malicious gem version and created this issue. Later that day, the RubyGems security team yanked the offending gem version and locked the affected maintainer’s account. Several other gems were similarly affected."
Of the eleven libraries, five were directly related to crypto. These included doge_coin, coin_base, and blockchain_wallet. Overall, the eleven libraries were downloaded around 3500 times and may have infected thousands of computers.
Information on these pages contains forward-looking statements that involve risks and uncertainties. Markets and instruments profiled on this page are for informational purposes only and should not in any way come across as a recommendation to buy or sell in these assets. You should do your own thorough research before making any investment decisions. FXStreet does not in any way guarantee that this information is free from mistakes, errors, or material misstatements. It also does not guarantee that this information is of a timely nature. Investing in Open Markets involves a great deal of risk, including the loss of all or a portion of your investment, as well as emotional distress. All risks, losses and costs associated with investing, including total loss of principal, are your responsibility. The views and opinions expressed in this article are those of the authors and do not necessarily reflect the official policy or position of FXStreet nor its advertisers.