Shai-Hulud Descendant Surfaces in Malicious Ruby Gem That Steals Credentials and Poisons AI Tools

Summary

Socket's Threat Research Team analyzed strutil-core version 1.0.1, a malicious RubyGems package that runs a credential-stealing worm during gem install. The worm is a new build of the testmetest worm from the Miasma family, which descends from the publicly released Shai-Hulud toolkit. The malicious gem was published by account jamnajiea and removed by RubyGems about five hours after release.

Related items

• InfoCVE-2026-123357: GROBID command execution through crafted PDF filename in Linux conversionSimilar attack · NVD/CVE Database
• MediumCPython flaw exposes AI inference servers to sandbox escape attacksSimilar attack · CSO Online
• HighCVE-2026-88981: Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.18.0…Similar attack · NVD/CVE Database
• MediumBinance heist is stark example of AI governance gaps and basic security failuresSimilar attack · CSO Online
• HighCVE-2026-123019: eosphoros-ai DB-GPT untrusted code inclusion via trust_remote_codeSimilar attack · NVD/CVE Database