An update on the May spam-publishing campaign on rubygems.org

Following reporting by The Wall Street Journal and the publication of research by Nightingale Collective , we want to clarify what we know about the spam-publishing campaign on rubygems.org in May 2026. We take the security of rubygems.org and the community that depends on it seriously. Our team reviewed the activity and discussed the findings with researchers from Nightingale Collective.