GemStuffer Campaign Abuses RubyGems as Exfiltration Channel Targeting UK Local Government

The GemStuffer campaign covertly scrapes UK local government portals and abuses RubyGems as a data exfiltration channel, embedding stolen council data in junk gem packages published with hardcoded credentials—demonstrating how trusted package registries can be weaponized for stealthy, programmatic data theft.