Typosquatting RubyGems laced with Bitcoin-nabbing malware have been downloaded thousands of times

'Seemingly no transactions were made' but problem highlights risks of software supply chain

A researcher has uncovered malicious packages in the RubyGems repository, one of which was downloaded more than 2,000 times."