May 16 , 05:12 UTC Resolved - This incident has been resolved and we’ve re-enabled account registrations May 13 , 03:17 UTC Update - The malicious spam activity against rubygems.org has stopped. The bot accounts responsible have been blocked and removed, and the 500+ malicious packages pushed during the attack have been yanked from the registry. Registrations will remain closed while we coordinate with Fastly to enable WAF protection and tighten rate limiting on account creation.
Temporarily disabling new user registrations
calendar_today
May 16, 2026
domain
rubygems