SleeperGem Uses Three Malicious RubyGems Packages to Target Developer Machines

Cybersecurity researchers have flagged a new software supply chain attack codenamed SleeperGem targeting the Ruby ecosystem after three malicious gems were published to RubyGems with the end goal of serving additional payloads. The rogue gems are listed below - git_credential_manager (versions 2.8.0, 2.8.1, 2.8.2, 2.8.3) - Published on July 18, 2026 Dendreo (versions 1.1.3, 1.1.4) -

The article describes *SleeperGem*, a coordinated software supply chain attack in which compromised RubyGems packages (including git_credential_manager and Dendreo) were used to deliver second-stage payloads, establish persistence daemons, and evade CI environments to specifically target developer machines.[1][3][6] These facts indicate a mature attacker abusing open-source ecosystems and dormant maintainer accounts to gain deep access to developer workstations, with high potential impact if those developers build or operate AI systems.[1][3] From a RealGround perspective, any organization using Ruby in AI pipelines or agent frameworks should treat affected environments as potentially fully compromised, perform SBOM-based impact analysis, rotate credentials, and harden CI/CD and developer endpoints; this pattern directly maps to AI supply chain risk for AI agents and models built on compromised tooling.[1][3] Practically, teams should integrate supply chain scanning and checksum verification into AI build workflows, continuously red-team agent environments for malicious dependencies, and update AI security readiness plans to account for ecosystem-level package hijacks.