8 stories tagged rubygems, newest first.
494 points by gregnavis | 398 comments
Blog post by Aaron Patterson (tenderlove) about reports that OpenAI agents exploited a RubyGems.org caching vulnerability and ran scraping code on RubyDoc.info.
883 points by chao- | 521 comments
A report alleging that internal OpenAI AI agents uploaded hundreds of malicious packages to RubyGems in May 2026, attempted API key theft, and abused RubyDoc.info.
336 points by ibobev | 96 comments
Aaron Patterson's blog post examining whether Ruby's Bundler can match uv's speed, reviewing uv's techniques and Bundler's bottlenecks.
620 points by sebiw | 322 comments
Official Ruby news post by matz announcing that the Ruby core team is taking ownership of the RubyGems and Bundler repositories.
480 points by mbStavola | 254 comments
Announcement page for gem.coop, a new Bundler-compatible Ruby gem server run by former RubyGems.org maintainers, mirroring all RubyGems.org gems.
491 points by bradgessler | 310 comments
Blog post by Joel Drapper alleging Shopify pressured Ruby Central into taking over the Bundler and RubyGems projects from their maintainers without consent.
![Screenshot of pup-e.com: Ruby Central's Attack on RubyGems [pdf]](https://hn.urlbox.com/shots/renders/2025/9/19/7938d5f7-b4ea-4b96-a9a4-8699861883cc.jpg)
651 points by jolux | 220 comments
A PDF statement by longtime RubyGems maintainer Ellen (duckinator) describing how Ruby Central took control of the RubyGems GitHub enterprise and removed maintainers in September 2025.
682 points by matesz | 109 comments
Interactive 3D visualizations of package manager dependency graphs (npm, Bower, Composer, RubyGems, Go and others) rendered as galaxies.