Poisoned Ruby Gems and Go Modules Exploit CI Pipelines for Credential Theft

iT4iNT SERVER A new software supply chain attack campaign has been observed using sleeper packages as a conduit to subsequently push malicious payloa…