ruby · Index

ask-computer 0.1.4 Drive desktop apps in the background via Cua Driver — screenshots, clicks, typing, sandboxed VMs, and encrypted Computer History. Wraps Cua… 2,794 installs 1h ago ruby

ebe31b66b36b46e42546a5882a6d2f8eb673cf86c77f81399c5b2cc5dd6fb2af K(Am)O₂(ErXe₂)H₆(Cm₄Db₄FOsPo₄U)Md₂(In₃Pa)

50% Remote script execution risk

aidp 0.49.8 The AI-Dev-Pipeline (AIDP) CLI provides a powerful, markdown-driven workflow for software development. It supports in-depth project analysi… 31,767 installs 20h ago ruby

0a58513b7aea4d6822991f5171f89b292ae2423319985bbd5c60d58d7cc59822 K₃(AmLiTe)O₁₀(Pr₂AsC₂Ca₂Er₂EuILa₂S₃Xe)H₈(Cm₁₆Cr₃Db₁₅F₁₄MgOs₉Po₉U₂)Md₃(In₆Pa₃)

92% New version, zero recent downloads

hiiro 0.1.383 Build multi-command CLI tools with subcommand dispatch, abbreviation matching, and a plugin system. Similar to git or docker command struct… 112,431 installs 21h ago ruby

5de266181a0bc95701453f1f4430a07132427068d1d7e3c551433c35d9417d90 K₃(AmMcTe)O₈(As₅ICCa₃La₂P₂S₄Xe₃)H₉(Cm₁₅CrDb₂₂F₂₂HfOs₇Po₁₅TiU₁₅)Md₃(Pa₃Pd)

65% legitimate CLI framework

arctica_autorization-rails-plugin 0.1.gem.4680ec35 1d ago ruby

eb7f5e8054ff1471f7ec097c2bb4ad76a719a25571a506d57641c0efb2e2bd02 ✓ O(S₂)H(Cm)Md₂(BkPa₂)

92% Obfuscated extension path, empty build

specguard-ruby 0.3.22 SpecGuard's Ruby client — every Ruby test framework, one gem. Ships an additive RSpec formatter and a Minitest reporter that post test-run… 14,384 installs 1d ago ruby

30ecb07c82ae542fe73c17e453046d8cc9f23b699328435d313eeaafe90ea6fd K₂(AmLi)O₇(SAsC₃EuLaPrXe)H₇(Cm₁₆Cr₂Db₄F₈OsPo₁₀U)Md₃(Bk₄Pa)

55% curl piped to sh

hiiro 0.1.381 Build multi-command CLI tools with subcommand dispatch, abbreviation matching, and a plugin system. Similar to git or docker command struct… 111,596 installs 1d ago ruby

943b33bb439a14285b4d0b9d789de0c70333f17c81cb7c87890acb0481433b6d K₃(AmMcTe)O₈(As₅ICCa₃La₂P₂S₄Xe₃)H₉(Cm₁₅CrDb₂₂F₂₂HfOs₇Po₁₅TiU₁₅)Md₃(Pa₃Pd)

65% Legitimate CLI framework gem

hiiro 0.1.380 Build multi-command CLI tools with subcommand dispatch, abbreviation matching, and a plugin system. Similar to git or docker command struct… 110,426 installs 2d ago ruby

305b6045ad045be15a0d12e4bff23f2d21ffcbbe5a4cf08073759ba28bc887fa K₂(McTe)O₉(As₅I₂CCa₃ErLa₂P₂S₄Xe₄)H₉(Cm₁₄CrDb₂₂F₂₂HfOs₇Po₁₅TiU₁₅)Md₄(In₈Pa₃Pd)

63% legitimate CLI tool

specguard-ruby 0.3.21 SpecGuard's Ruby client — every Ruby test framework, one gem. Ships an additive RSpec formatter and a Minitest reporter that post test-run… 13,689 installs 2d ago ruby

ce456fcd5523cd0baf5e91e7ab8db5bc7f82b69eb58d0948043a3606f12a6cbf K(Li)O₇(SAsC₃EuLaPrXe₂)H₇(Cm₁₅Cr₂Db₄F₈OsPo₁₀U)Md₃(Bk₄Pa)

54% curl-pipe-sh install, zero recent downloads

comfy_middle_seat 4.0.0 Comfy Middle Seat is a Rails 7.2+ CMS engine. 3,065 installs 3d ago ruby

7cd79d375656581530aaabe4f896429b2c64182ec3963c43787bc36c534b0e9c K(Li₄)O₈(As₅C₄AlDyEr₂EuS₅Xe₂)H₉(Cm₂₇Cr₃Db₂₈F₁₃Hf₂Os₇Po₁₀TiU₁₃)Md₄(Bk₅Pa₈Pt)

63% Legitimate Rails CMS engine

houseaccount 0.17.0 One stylesheet and one script, served by the engine or from design.houseaccount.com, the marks every app is known by, the pages shown when… 5,253 installs 3d ago ruby

ad782d468cfc93618a38eca54b09ae147816b605895eb52a4ca33f721e78c54a K(Li₂)O₉(S₃AlC₂Ca₄CoDyEr₂EuXe)H₈(Cm₂₉Db₂₂F₃Hf₂Os₆Po₅TiU₁₈)Md

72% obfuscated JS, credential access

houseaccount 0.16.0 One stylesheet and one script, served by the engine or from design.houseaccount.com, the marks every app is known by, the pages shown when… 5,170 installs 3d ago ruby

c20f6291d8bc91e88844a5912527d1a92c0129e017669b78914f4c12d775ed26 K(Li₂)O₉(S₃AlC₂Ca₄CoDyEr₂EuXe)H₈(Cm₂₉Db₂₂F₃Hf₂Os₆Po₅TiU₁₈)Md

72% obfuscated JS, credential access

docpdf 0.1.5 Multi-format document-to-PDF converter with pluggable adapters and zero hard dependencies. Supports Word, Excel, PowerPoint, OpenDocument,… 1,529 installs 3d ago ruby

345bdb5527daca4422b81c7324055ba3cfc9103b790635af6306e3bc38897831 O(C)H₅(CmDb₂F₂OsPo₂)Md

88% New package, zero recent downloads

houseaccount 0.15.0 One stylesheet and one script, served by the engine or from design.houseaccount.com, the marks every app is known by, the pages shown when… 4,763 installs 3d ago ruby

b78f129c6c72d8238026270ed128a6f3189d20bb3f1a520c92d6e25271727be4 K(Li₂)O₉(S₃AlC₂Ca₄CoDyEr₂EuXe)H₈(Cm₂₉Db₂₂F₃Hf₂Os₆Po₅TiU₁₈)Md

72% obfuscated JS, credential access

pwn 0.5.742 https://github.com/0dayinc/pwn/README.md 1,099,241 installs 3d ago ruby

c26a52426ca5caca3ddd3ce3fbaca86eb18fb0c5b8c790e3acfba070639a6528 K₄(Am₅Li₄LuTe₁₂)O₁₄(C₁₆Er₉I₆P₁₀Pr₂S₉Xe₇Al₄As₆Ca₆CoDy₃Eu₂La)H₉(Cm₇₅Cr₁₁Db₃₈F₃₇HfOs₃₇Po₃₈TiU₆)Md₅(Bk₇InPa₁₁)

66% Legitimate security testing framework

woods 2.0.0.beta3 Woods extracts structured data from Rails applications for use in AI-assisted development tooling. It provides version-specific context by… 3,960 installs 4d ago ruby

7b5efbf09f55a6ee744dd103f7b178a9df1103690bb64a6b67d531724839d704 K₃(AmLi₂Te)O₁₁(C₅As₃Ca₄CoEr₄EuILa₃PrS₃Xe₄)H₈(Cm₂₄Cr₄Db₁₉Ds₂F₁₉Os₇Po₂₅U)Md₃(InPa₄)

89% Agent hooks, credential scanning, new release

eac_git 0.22.1 Put here de description. 52,535 installs 4d ago ruby

fc587b7135f31665ce17ef90da2fbbf4aa5d2c04aa8e799c920a5e9b2b434987 O₆(AsI₂LaPSXe₂)H₅(Cm₇Db₂F₁₁Os₆Po₁₀)Md₃(BkPa)

42% Placeholder metadata, zero recent downloads

gsc-cli 2.2.5 == OVERVIEW A lightweight, zero-gem CLI tool and AI agent engine for Google Search Console, Google Indexing API, Google Analytics 4, Keywo… 5,108 installs 4d ago ruby

ae28ad026e69d3454d377f1769850027893fb864ef4bc107d5dd9cd2febca68a K₂(LiTe)O₁₂(As₃Eu₂IAlC₂CaDyEr₃PPrSXe₃)H₇(Cm₂₄Cr₅Db₁₂F₈Os₇Po₆U₂)Md₂(Pa)

99% New package, zero recent downloads

datamitsu 0.3.1 datamitsu downloads, verifies (SHA-256), and manages binaries for linting and development tools across platforms using JavaScript-powered c… 8,202 installs 4d ago ruby

4257f6b26b7ea714f1260ab7d38a191fdfd96b759699d06f157208d4ee2ef6d6 K₂(Li₃Te)O₁₂(As₄C₇I₃XeAlCa₂Dy₂Er₄EuLaP₂S)H₁₁(Cm₂₆Cr₁₄Db₁₃DsF₁₇HfMgOs₁₄Po₁₃TiU)Md₅(Bi₄BkPtSi₂)

93% New package, zero recent downloads

cocoapods-aqara-localzedLoader 0.1.19 Aqara 多语言插件 10,072 installs 4d ago ruby

42b3310023469cf7e201861f12067ba6a13892b4861055caed57d2695b1e2de6 O₅(CAsErEu₂S₃)H₇(Cm₂₁CrDb₇F₁₀Os₃Po₅Ti)Md₃(Pa₂)

87% Hardcoded credentials and obfuscated headers

unitsdb 2.2.6 Library to handle UnitsDB content. 92,665 installs 4d ago ruby

2902e9dd9aff341983b6cc73f1cbe9b908b2c437c6eca36154be2b9d58873247 K(Li)O(S)H₅(Cm₅Db₂F₄OsPo₂)Md₂(Bk₃Pa₂)

comfy_middle_seat 3.2.1 Comfy Middle Seat is a Rails 7.2+ CMS Engine forked from ComfortableMediaSurfer 210 installs 4d ago ruby

9e60a9b6b247a8d81fd6c0b7394123ec824ccfc038e45629548eec3b5c3d8430 K(Li₄)O₈(As₅C₄AlDyEr₂EuS₄Xe₂)H₉(Cm₂₆Cr₂Db₂₆F₁₀Hf₂Os₇Po₁₀TiU₁₂)Md₄(Bk₅Pa₈Pt)

64% legitimate CMS fork, standard deps

houseaccount 0.13.2 One stylesheet and one script, served by the engine or from design.houseaccount.com, the marks every app is known by, the pages shown when… 3,266 installs 4d ago ruby

d9ad880d81ee61ff1779cf6d8984afde67ac6ae90b27ead5ba361663378d5f86 K(Li₂)O₉(S₃AlC₂Ca₄CoDyEr₂EuXe)H₈(Cm₂₇Db₂₁F₃Hf₂Os₆Po₅TiU₁₉)Md

74% Obfuscated JS, credential access, zero downloads

houseaccount 0.13.1 One stylesheet and one script, served by the engine or from design.houseaccount.com, the marks every app is known by, the pages shown when… 3,226 installs 4d ago ruby

d08fb9de8a0322d9ad4dc388e6e5ee262eab3766d3537cbb9d5508533a57df8c K(Li₂)O₉(S₃AlC₂Ca₄CoDyEr₂EuXe)H₈(Cm₂₇Db₂₁F₃Hf₂Os₆Po₅TiU₁₉)Md

74% obfuscated JS, credential access

houseaccount 0.13.0 One stylesheet and one script, served by the engine or from design.houseaccount.com, the marks every app is known by, the pages shown when… 3,116 installs 4d ago ruby

c36b49b3d0e372b3814c664a8eaa21dc22e4d90b220745b420d0611d73fb4101 K(Li₂)O₉(S₃AlC₂Ca₄CoDyEr₂EuXe)H₈(Cm₂₇Db₂₁F₃Hf₂Os₆Po₅TiU₁₉)Md

74% obfuscated JS, credential access

houseaccount 0.12.0 One stylesheet and one script, served by the engine or from design.houseaccount.com, the marks every app is known by, the pages shown when… 2,929 installs 4d ago ruby

3a8bb83f0e487facae92868cce610a41b76e3c9e1c80762b39ac3a2f7b55dbb0 K(Li₂)O₉(S₃AlC₂Ca₄CoDyEr₂EuXe)H₈(Cm₂₇Db₂₁F₃Hf₂Os₆Po₅TiU₁₉)Md

73% obfuscated JS, credential access

gsc-cli 2.2.4 == OVERVIEW A lightweight, zero-gem CLI tool and AI agent engine for Google Search Console, Google Indexing API, Google Analytics 4, Keywo… 4,670 installs 4d ago ruby

bbfcc63393ea5fe65b2e83a63d7556a4eced471e9b0e099f34f812256f0b8467 K₂(LiTe)O₁₂(As₃Eu₂IAlC₂CaDyEr₃PPrSXe₃)H₇(Cm₂₃Cr₅Db₁₂F₈Os₇Po₆U₂)Md₂(Pa)

99% New package, zero recent downloads

hiiro 0.1.377 Build multi-command CLI tools with subcommand dispatch, abbreviation matching, and a plugin system. Similar to git or docker command struct… 109,002 installs 5d ago ruby

94b99cbd69fc5e36e747204209e07368d518c4d05432be8f37d79b503ec88ec6 K₂(McTe)O₁₀(As₇C₃Ca₂DyErILa₂P₂S₅Xe₅)H₉(Cm₁₂CrDb₁₉F₂₀HfOs₆Po₁₆TiU₁₅)Md₃(Pa₃Pd)

66% legitimate CLI framework

gsc-cli 2.2.3 == OVERVIEW A lightweight, zero-gem CLI tool and AI agent engine for Google Search Console, Google Indexing API, Google Analytics 4, Keywo… 4,453 installs 5d ago ruby

eab4eec59ba276270670532c345edb022ab9621847910ce130eb13f1f60daa85 K₂(LiTe)O₁₂(As₃Eu₂IAlC₂CaDyEr₃PPrSXe₃)H₇(Cm₂₃Cr₅Db₁₂F₈Os₇Po₆U₂)Md₂(Pa)

99% New package, zero recent downloads

gsc-cli 2.2.2 == OVERVIEW A lightweight, zero-gem CLI tool and AI agent engine for Google Search Console, Google Indexing API, Google Analytics 4, Keywo… 4,231 installs 5d ago ruby

0b1da78787497535c12b62a0028882601846d8e138836d01a66d91b8211c5b0e K₂(LiTe)O₁₂(As₃Eu₂IAlC₂CaDyEr₃PPrSXe₃)H₇(Cm₂₃Cr₅Db₁₂F₈Os₇Po₆U₂)Md₂(Pa)

99% New package, zero recent downloads

tasku 0.4.0 Tasku is a terminal-based task manager with colour-coded priorities, status tracking, SQLite persistence, and a beautiful CLI interface. 2,760 installs 5d ago ruby

3fee89bea4aae913bdd99002ab69b89f1b1c455547e47e963851736f975bb993 O₂(C₂Eu)H₅(Cm₅Db₃F₂OsPo₂)Md(Pt)

87% New package, zero recent downloads

openclacky 1.5.15 OpenClacky is a 100% open-source (MIT) AI Agent that matches Claude Code on capability at comparable cost. Built on two years of agentic R&… 58,522 installs 5d ago ruby

1ccb907e12a6722a59917677a10b6f5ea3b3dca4f8578b10dd7144b4b298cdcb K₄(Am₄Li₉LuTe₄)O₁₂(As₁₈C₁₆Eu₇Ca₅Co₂Dy₃Er₅I₆La₄P₅S₁₅Xe₁₁)H₉(Cm₈₉Cr₇Db₅₄F₃₉Hf₄Os₃₃Po₄₄Ti₂U₂₂)Md₄(Bk₃Pa₉Pt₃)

66% Legitimate AI agent gem

spree_vpago 2.3.13.pre.pre1 This Spree Commerce extension integrates Cambodian payment gateways, supporting ABA Bank, Acleda Bank, and Wing for secure and seamless tra… 46,845 installs 5d ago ruby

e6225dfc3b2c50e51a23fe172040c6b1cfafd09a2f7fd9be953741d283271a32 K₃(AmLiTe)O₈(As₄C₂Ca₃CoIPS₄Xe)H₉(Cm₃₈Cr₅Db₃₀F₃HfOs₈Po₆TiU₄)Md₃(Bk₂Pa₉)

85% depends on suspicious npm: debug v4.4.0

canon 0.3.48 Canon provides canonicalization and pretty-printing for various serialization formats (XML, HTML, JSON, YAML), producing standardized forms… 147,789 installs 6d ago ruby

df9dca0b76db6bd4217b9d83d89e9e5c74464f566e0c0ecc68f282f7d7fb0261 K(Li)O₂(CLa)H₆(CmCrDb₄F₇Os₂Po₆)Md₂(Pa₂)

80% execution/ast-script

pwn 0.5.738 https://github.com/0dayinc/pwn/README.md 1,090,566 installs 6d ago ruby

45007e7e6d7435159cdb3115880abe7ebf8a5b08ffb69f5629e9ac56d7b98561 K₄(Am₅Li₄LuTe₁₂)O₁₄(C₁₅Er₉I₆P₁₀Pr₂S₉Xe₇Al₄As₅Ca₅CoDy₃Eu₂La)H₉(Cm₇₆Cr₁₁Db₃₈F₃₇HfOs₃₇Po₃₈TiU₆)Md₅(Bk₇InPa₁₁)

66% legitimate security testing framework

yamine 0.15.0 Gives every Ruby app a stable https://<app>.localhost URL instead of a memorized port. Explicit-run reverse proxy with zero-config name inf… 11,607 installs Sep 15 ruby

3453abe38636f09b5924a9c2cf6e3b7a62d3356ee04bdc07db3a3bd872d569d9 K(Am)O₈(P₄C₃PrAlDyLaS₂Xe₂)H₇(Cm₁₀Cr₂Db₄F₁₃Os₇Po₇U)Md₂(PaPt)

65% Legitimate local dev proxy tool

yamine 0.14.3 Gives every Ruby app a stable https://<app>.localhost URL instead of a memorized port. Explicit-run reverse proxy with zero-config name inf… 11,288 installs Sep 15 ruby

b3b0353dccf49e4dbbeaacdee3544031c8e3b725a82df180da01a694544132db K(Am)O₈(P₄C₃PrAlDyLaS₂Xe₂)H₇(Cm₁₀Cr₂Db₄F₁₃Os₇Po₇U)Md₂(PaPt)

65% Legitimate local dev proxy tool

yamine 0.14.1 Gives every Ruby app a stable https://<app>.localhost URL instead of a memorized port. Explicit-run reverse proxy with zero-config name inf… 10,815 installs Sep 15 ruby

0c483845c6da9b8e723de5d1873ef59294e65a72eda6f1a5b025d109f5ef2de9 K(Am)O₈(P₄C₃PrAlDyLaS₂Xe₂)H₇(Cm₁₀Cr₂Db₄F₁₂Os₇Po₇U)Md₂(PaPt)

65% Legit local dev proxy tooling

houseaccount 0.10.0 One stylesheet and one script, served by the engine or from design.houseaccount.com, the marks every app is known by, the pages shown when… 1,707 installs Sep 14 ruby

4938be712ca199a19003fbeb4c5f973793a9c51c4d33b4747a5fa9902b1c5c8d K(Li₂)O₉(S₃AlC₂Ca₄CoDyEr₂EuXe₂)H₈(Cm₂₇Db₂₁F₃Hf₂Os₆Po₅TiU₁₉)Md

73% obfuscated JS, credential access

houseaccount 0.9.0 One stylesheet and one script, served by the engine or from design.houseaccount.com, the marks every app is known by, the pages shown when… 1,707 installs Sep 14 ruby

9bf907cfeab4bbeeac99f45144b4bc5f2079eabe8e49f939d00598612e51f9e8 K(Li₂)O₉(S₃AlC₂Ca₄CoDyEr₂EuXe₂)H₈(Cm₂₇Db₂₁F₃Hf₂Os₆Po₅TiU₁₉)Md

73% obfuscated JS, credential access

houseaccount 0.8.1 One stylesheet and one script, served by the engine or from design.houseaccount.com, the marks every app is known by, the pages shown when… 1,553 installs Sep 14 ruby

78ce1451776657739a92c02589e799f515b0eb3324e295f18f2681157ab53970 K(Li₂)O₉(S₃AlC₂Ca₄CoDyErEuXe₂)H₈(Cm₂₇Db₂₁F₃Hf₂Os₆Po₅TiU₁₉)Md

74% obfuscated JS, credential access

houseaccount 0.8.0 One stylesheet and one script, served by the engine or from design.houseaccount.com, the marks every app is known by, the pages shown when… 1,553 installs Sep 14 ruby

65e18edaf7f13a8ec0398391b1070b14de28fb8fd57ce70ccc4d97e4761473b4 K(Li₂)O₉(S₃AlC₂Ca₄CoDyErEuXe₂)H₈(Cm₂₇Db₂₁F₃Hf₂Os₆Po₅TiU₁₉)Md

74% obfuscated JS, credential access

houseaccount 0.7.0 One stylesheet and one script, served by the engine or from design.houseaccount.com, the marks every app is known by, the pages shown when… 1,444 installs Sep 14 ruby

39cbbea00ec29945f17f54808e86b40220e51b8c77f69e8dfd9d8f236f7d105a K(Li₂)O₉(S₃AlC₂Ca₄CoDyErEuXe₂)H₈(Cm₂₇Db₂₁F₃Hf₂Os₆Po₅TiU₁₉)Md

74% obfuscated JS, credential access

houseaccount 0.6.0 One stylesheet and one script, served by the engine or from design.houseaccount.com, the marks every app is known by, the pages shown when… 1,381 installs Sep 14 ruby

a48764d0b24e284cb5386726291d46059d8a31a70c6613b90dfa809e6a22fc0e K(Li₂)O₉(S₃AlC₂Ca₄CoDyErEuXe₂)H₈(Cm₂₇Db₂₁F₃Hf₂Os₆Po₅TiU₁₉)Md

74% obfuscated JS, credential access

datamitsu 0.3.0 datamitsu downloads, verifies (SHA-256), and manages binaries for linting and development tools across platforms using JavaScript-powered c… 7,839 installs Sep 14 ruby

a6986b7d640fd1d37089b4ef3181599dfb562254b5480a1eff7ee9797f46903d K₂(Li₃Te)O₁₂(As₄C₇I₃XeAlCa₂Dy₂Er₄EuLaP₂S)H₁₁(Cm₂₆Cr₁₄Db₁₃DsF₁₇HfMgOs₁₄Po₁₃TiU)Md₅(Bi₄BkPtSi₂)

93% New package, high entropy binaries

pwn 0.5.736 https://github.com/0dayinc/pwn/README.md 1,085,493 installs Sep 14 ruby

8c3242bf88cb915112ff83360fa4311f178e27b609c0a36b9dac424925a96a38 K₄(Am₇Li₂LuTe₇)O₁₂(Er₄I₄P₅PrS₃Xe₃Al₂AsC₅Ca₃Dy₂Eu)H₉(Cm₆₄Cr₁₀Db₂₁F₂₉HfOs₂₇Po₃₆TiU₄)Md₄(Bk₄Pa₇)

99% Offensive security tool with evasion features

pwn 0.5.734 Sep 13 ruby

0f6b7f50d7919c2bb3c112c3e4c686b13ace2c4740d5de22269ed44fb8f6ac16 K₄(Am₇Li₂LuTe₇)O₁₂(Er₄I₄P₅PrS₃Xe₃Al₂AsC₅Ca₃Dy₂Eu)H₉(Cm₆₄Cr₁₀Db₂₁F₂₉HfOs₂₇Po₃₆TiU₄)Md₄(Bk₄Pa₇)

99% Offensive security tool with evasion features

change_requests 0.4.0 ChangeRequests puts an approval gate in front of any action in your Rails application. Instead of running a guarded operation immediately,… 4,329 installs Sep 12 ruby

e88dd70d704b81100bf8b1efdd4c8c563cd70cceb026a959e75ba875344e626f H₅(CmDb₂FOsPo)Md(Pa₂)

36% Embedded agent instruction files

change_requests 0.3.0 ChangeRequests puts an approval gate in front of any action in your Rails application. Instead of running a guarded operation immediately,… 3,852 installs Sep 12 ruby

32f3b85b89143c2b5d28821d996b2d0eeaa4ebbb69ee78259ffe765ae2d3c360 H₅(CmDb₂FOsPo)Md(Pa₂)

36% Embedded agent instruction files

change_requests 0.2.5 ChangeRequests puts an approval gate in front of any action in your Rails application. Instead of running a guarded operation immediately,… 3,218 installs Sep 11 ruby

78d6202955ebf6098f91b83a74340c124170675ff329a9adee23ad31178c288e H₅(CmDb₂FOsPo)Md(Pa₂)

35% Embedded agent instruction files

reactive_component 0.8.1 Build reactive, real-time UI components that automatically re-render server-side when subscribed models change. Uses ViewComponent, Turbo S… 2,128 installs Sep 11 ruby

0c15b922d31d4bc28abaeef35aa346fbae0c52f9fb1d96fc72ed791dc354430e H₆(Cm₆CrDb₇OsPo₃U₂)

38% Dynamic code execution, new release

localvault 1.15.0 Encrypted local vault for secrets with MCP server for AI agents. No cloud required. Powers credentials management at inventlist.com. 14,814 installs Sep 11 ruby

e76e1d3f85769f4b1a2310bfcd360abcd3f9f31a00b4a8292fc4b14ac98407a0 K(Li)O(C₂)H₆(Cm₁₀Cr₃Db₆F₈Os₃Po₆)

45% curl piped to shell

fastpixapi 1.2.1 A robust, type-safe Ruby SDK for seamless integration with the FastPix API platform for media uploads, live streaming, playlists, analytics… 2,479 installs Sep 11 ruby

730d18906c6ce2c6e84d2ecc2efd832285dbe76ed0ceac7b9bba95b4580fa0de O(Eu)H₃(Cm₃Db₄Os)

74% New package, low downloads, odd findings

mcptask-rails-runner 0.3.26 Thin Rails wrapper around the mcptask_runner Go binary. Ships the platform-specific binary inside the gem and exposes the same rake tasks a… 29,624 installs Sep 11 ruby

290092e495f0694677a426936a4f26676095e0658a4ac51f04dbaffcbd89fb8f H₄(CmF₇Os₂Po)

36% New version, zero recent downloads

mcptask-rails-runner 0.3.25 Thin Rails wrapper around the mcptask_runner Go binary. Ships the platform-specific binary inside the gem and exposes the same rake tasks a… 28,188 installs Sep 11 ruby

08281c42d3e9eae83ecebf82a508f76c27d7a5616c1613c8e0d40b61f305d5d6 H₄(CmF₇Os₂Po)

36% New gem, zero recent downloads

change_requests 0.2.0 ChangeRequests puts an approval gate in front of any action in your Rails application. Instead of running a guarded operation immediately,… 2,592 installs Sep 11 ruby

b7d892852803ccb45e5c72407c9720497aeb9ec57790293a4804d5889fdc15a3 H₄(CmDb₂FOs)Md(Pa₂)

36% Prompt injection in package files

change_requests 0.1.8 ChangeRequests puts an approval gate in front of any action in your Rails application. Instead of running a guarded operation immediately,… 2,009 installs Sep 10 ruby

64f5ac5f5305fedac2656a15cc43edc50b5a3cb9d5e9d5bfe10303126fb6a4bb H₄(CmDbFOs)Md(Pa₂)

35% Embedded agent instructions

pwn 0.5.732 https://github.com/0dayinc/pwn/README.md 1,075,428 installs Sep 10 ruby

977a0a0a695eb633add0c90368762637c7c01ba02087f4f2cd07e253536a04bb K₄(Am₇Li₂LuTe₇)O₁₂(Ca₄Er₄I₄P₅PrS₃Xe₃Al₂AsC₅Dy₂Eu)H₉(Cm₆₄Cr₁₀Db₂₀F₂₉HfOs₂₇Po₃₆TiU₃)Md₄(Bk₄Pa₆)

99% Offensive security tool with eval

pwn 0.5.731 https://github.com/0dayinc/pwn/README.md 1,075,139 installs Sep 10 ruby

00e3ff0cbb17b3390a3e396bd99c3d1bf4d849d570fb6ea33b9a31bbb8f2d017 K₄(Am₇Li₂LuTe₇)O₁₂(Er₄I₄P₅PrS₃Xe₃Al₂AsC₅Ca₃Dy₂Eu)H₉(Cm₆₄Cr₁₀Db₂₀F₂₉HfOs₂₇Po₃₆TiU₃)Md₄(Bk₄Pa₇)

99% Offensive security tool with evasion features

reactive_component 0.8.0 Build reactive, real-time UI components that automatically re-render server-side when subscribed models change. Uses ViewComponent, Turbo S… 1,787 installs Sep 10 ruby

5c2486dcfeb693d22973c5a4c467efe3a6d48b0af213b03761cef1705fad7a3d H₆(Cm₆CrDb₇OsPo₃U₂)

38% Dynamic code execution, new release

yamine 0.8.1 Gives every Ruby app a stable https://<app>.localhost URL instead of a memorized port. Explicit-run reverse proxy with zero-config name inf… 4,962 installs Sep 10 ruby

653a50f9247745ba26eb33e79c2890d05bcfdabef200130c533002a94f1cebcb K(Am)O₅(PPrCDyXe)H₇(Cm₉Cr₂DbF₁₀Os₇Po₇U)Md₂(Pa)

98% New gem, system persistence, CA trust

yamine 0.8.0 Gives every Ruby app a stable https://<app>.localhost URL instead of a memorized port. Explicit-run reverse proxy with zero-config name inf… 4,564 installs Sep 10 ruby

a72065af7d59d083cdcbfdb270aec2abe8c429da0823a3e57ce6293f0d623486 K(Am)O₄(PPrDyXe)H₇(Cm₉Cr₂DbF₁₀Os₇Po₇U)Md₂(Pa)

66% Legitimate local dev proxy tool

lux-hammer 0.3.29 Minimal, zero-dependency Thor-inspired CLI builder for Ruby. Class DSL and block DSL, subcommands, options, auto help, color helpers. 11,198 installs Sep 10 ruby

1f30d0d238ec7a6470dc08741faef81a9b2bf1f0c6af59dd57c6c2f965e13261 O₃(P₂CaXe)H₆(Cm₁₂Db₄DsF₁₁Os₇Po₁₃)Md₃(BiPa₂Si₃)

94% Bundled macOS app, credential access

yamine 0.6.1 Gives every Ruby app a stable https://<app>.localhost URL instead of a memorized port. Explicit-run reverse proxy with zero-config name inf… 4,463 installs Sep 10 ruby

b491902ab74ade241dfea588eda1306f5efcac2b150b96246b7eec026cda9a99 K(Am)O₄(PPrDyXe)H₇(Cm₉Cr₂DbF₁₀Os₇Po₇U)Md₂(Pa)

99% New gem, system persistence, low downloads

fastpixapi 1.2.0 A robust, type-safe Ruby SDK for seamless integration with the FastPix API platform for media uploads, live streaming, playlists, analytics… 1,980 installs Sep 10 ruby

58c188905892a3e7d25b8ea8d5f668967c89623b0a9f0f380c4ede6fbacf2a5e O(Eu)H₃(Cm₃Db₄Os)

74% New gem, beacon variable, low downloads

layered-resource-rails 0.2.0 A convention-over-configuration CRUD engine for Rails 8+, built on the layered-ui-rails gem. Declare a resource class, mount it in routes.r… 1,532 installs Sep 10 ruby

275c4879cd76c2e8e1c4b82821e389b7b3973aa845585312cbce68f691b8fcf3 K(Am)O(Xe)H₄(CmDb₂FPo₃)Md(Pa)

38% curl-pipe-sh in README

quality_gate 0.1.1 One CLI and configuration contract for staged Ruby code-quality checks. 1,040 installs Sep 10 ruby

5d9b7b8a3e42fc3466eeac06767e79e6d0e444ba55afd8958aca5eda52d47449 H₇(CmDb₃DsF₆Os₃Po₄U)Md(Pa)

36% Raw syscalls in quality tool

pwn 0.5.728 https://github.com/0dayinc/pwn/README.md 1,071,239 installs Sep 9 ruby

68b8f5653ecc8197e92d39c6edfd49b01a1b7952f101761b02bdb42952d47f49 K₄(Am₇Li₂LuTe₇)O₁₂(C₇Ca₄Er₄I₄P₅PrS₅Xe₃Al₂As₂Dy₂Eu)H₉(F₂₉Cm₆₄Cr₁₀Db₂₀HfOs₂₆Po₃₆TiU₃)Md₅(Bk₄LiPa₅)

99% Offensive security tool with persistence

mcptask-rails-runner 0.3.24 Thin Rails wrapper around the mcptask_runner Go binary. Ships the platform-specific binary inside the gem and exposes the same rake tasks a… 26,565 installs Sep 9 ruby

18e504ab733f4332bd98b95cc263b4ebe0bfb05ebd77b225cbc55824803b5046 H₄(CmF₇Os₂Po)

36% New version, unusual paths

pwn 0.5.725 https://github.com/0dayinc/pwn/README.md 1,069,752 installs Sep 9 ruby

273210f4c689be72018187abbc90b2179dc722f1feba97301331a1c00df7b06f K₄(Am₇Li₂LuTe₇)O₁₂(Ca₄Er₄I₄P₅PrS₂Xe₃Al₂AsC₄Dy₂Eu)H₁₀(Cm₆₇Cr₁₀Db₁₉Ds₂F₃₀HfOs₂₉Po₃₉TiU₃)Md₅(Bk₃LiPa₆)

66% Offensive security tool with evasion features

rails-hyperdrive 0.10.0 Rails Hyperdrive mounts an MCP (Model Context Protocol) server at /_hyperdrive/mcp in development, exposing introspection tools for AI codi… 7,662 installs Sep 9 ruby

a37fad62af2afb602ab044e78e413129adf23f97f3fbfa8d1155b577de0e36ac K(Am)O(C)H₆(Cm₆CrDb₄F₆OsPo₄)Md(Pa)

42% New gem, dynamic code eval

stoplight 6.0.0.rc3 An implementation of the circuit breaker pattern. 11,809,105 installs Sep 9 ruby

44fff056aa0e7fbca98263b8e1d6612771b780170467866eda81ade5a75bf15b O₂(CS)H₈(Cm₁₇CrDb₈HfOs₃Po₂TiU₈)Md₂(LiPa)

48% Author mismatch, fresh release

lux-hammer 0.3.28 Minimal, zero-dependency Thor-inspired CLI builder for Ruby. Class DSL and block DSL, subcommands, options, auto help, color helpers. 10,739 installs Sep 9 ruby

59c9830081b6ebd2879d6e97a91341ced648133af2e2fb1b455512f07540db15 O₄(PC₂CaXe)H₆(Cm₁₁Db₄DsF₁₁Os₇Po₁₃)Md₄(BiHePa₂Si₃)

85% Bundled macOS app, credential access

yamine 0.4.0 Gives every Ruby app a stable https://<app>.localhost URL instead of a memorized port. Explicit-run reverse proxy with zero-config name inf… 315 installs Sep 8 ruby

b1f488651531f159824a9175682d3e9de2e5b164312360572c0933f0a9ee3d62 K(Am)O₄(PPrDyXe)H₇(Cm₇Cr₂DbF₁₀Os₇Po₇U)Md₂(Pa)

66% New gem, system persistence

pwn 0.5.724 https://github.com/0dayinc/pwn/README.md 1,066,675 installs Sep 8 ruby

d2c6619f155c623b7f247aa1d49ace823a5c0b352e0bad446db24ea36caaad0e K₄(Am₇Li₂LuTe₇)O₁₂(C₆Ca₄Er₄I₄P₅PrS₄Xe₃Al₂AsDy₂Eu)H₉(F₂₉Cm₆₃Cr₁₀Db₁₈HfOs₂₆Po₃₅TiU₃)Md₅(Bk₃LiPa₅)

99% Offensive security tool with persistence

ask-local 0.2.1 Gives every Ruby app a stable https://<app>.localhost URL instead of a memorized port. Explicit-run reverse proxy with zero-config name inf… 2,830 installs Sep 8 ruby

79aa7d40c9b6b187e5a7fb957de5335a3b443627ed24f74d7d3089f0e3619772 K(Am)O₄(PPrDyXe)H₇(Cm₇Cr₂DbF₁₀Os₆Po₇U)Md(Pa)

66% Legitimate local dev proxy tool

pwn 0.5.723 https://github.com/0dayinc/pwn/README.md 1,066,446 installs Sep 8 ruby

7e3a75cd8d0d98ce22f74143a4dc57f0b46d6cae589229d6bdbf9854bdc2c613 K₃(Am₆Li₂Te₇)O₁₂(Ca₃Er₄I₄P₅PrS₃Xe₂Al₂AsC₅Dy₂Eu)H₉(F₂₆Cm₅₉Cr₉Db₁₈HfOs₂₄Po₃₄TiU₃)Md₅(Bk₂LiPa₃)

99% Offensive security tool with eval

kpi_assembler 0.5.1 A mountable Rails engine and Ruby library that proposes KPIs from application schemas and certifies their SQL before publication. 13 installs Sep 8 ruby

7672f408d1fa62896d37326ed27fabafbe5be2fb90ffebb9cf431ea6a69590c0 H₆(Cm₁₆Db₅F₂Os₃PoU₆)

51% New gem, low downloads, LLM integration

stoplight 6.0.0.rc1 An implementation of the circuit breaker pattern. 11,802,712 installs Sep 8 ruby

bee249937317629c44cf663e581707e5aa7abb41adcc7c9116fb9fac205e2030 O(C)H₈(Cm₁₇CrDb₇HfOs₃Po₂TiU₈)Md(Li)

47% Author mismatch, fresh release

decoding 0.5.0 Decode dynamic values into known Ruby data structures 7,535 installs Sep 8 ruby

cbd27c507606a0e2a86de994dac1dc7ac72d9a38ee9eb94167e4ca06505f56f0 K(Te)O(Xe)H₅(Cm₃Db₂FOs₂Po)Md(Pa₂)

40% AI agent hook auto-allow

rails-hyperdrive 0.9.2 Rails Hyperdrive mounts an MCP (Model Context Protocol) server at /_hyperdrive/mcp in development, exposing introspection tools for AI codi… 7,054 installs Sep 7 ruby

f764e100ccc24d28c609ebd305368e9375a59192c75618e2ed867b50170b6751 H₆(Cm₅CrDb₄F₆OsPo₃)Md(Pa)

39% New gem, dynamic eval, MCP server

archgate 0.57.0 Enforce Architecture Decision Records as executable rules — for both humans and AI agents 8,848 installs Sep 7 ruby

17f9d461cf13e0f3d27672d2895082f8124cc488d0e8ebca5d75f669aabff79e H₆(Cm₄CrDbF₅Os₂Po₃)

71% New package, binary download

spree_cm_commissioner 2.12.7.pre.pre1 Add (optional) extension description here 119,419 installs Sep 7 ruby

30dc15de425b9d3dea52bb493e8dd07c393572a1fdba581be5f65c6363dff172 K(Am)H₇(Cm₃₀Cr₄Db₁₁F₄Os₆Po₅U₄)Md₂(BkPa₂)

63% Placeholder author, zero-day age

reactive_component 0.7.2 Build reactive, real-time UI components that automatically re-render server-side when subscribed models change. Uses ViewComponent, Turbo S… 1,196 installs Sep 7 ruby

5ef7961631216709825460e0dbaf07a9cb4793c818c4f37ee12f2b9c2472ccae H₆(Cm₆CrDb₆OsPo₃U₂)

38% Dynamic code execution, low downloads

archgate 0.56.0 Enforce Architecture Decision Records as executable rules — for both humans and AI agents 8,111 installs Sep 7 ruby

bb3cdbe47e35ddc6debd84ae68f10c3430315ece74baf9c72acd3c34961a278f H₆(Cm₄CrDbF₅Os₂Po₃)

71% New package, binary download shim

decoding 0.4.0 Decode dynamic values into known Ruby data structures 6,980 installs Sep 6 ruby

32fa9fbe7d2d7e6414cd571cb170834c806fc4c44369dc9ff62ed070f5fea6c7 O(Xe)H₅(Cm₃Db₂FOs₂Po)Md(Pa)

45% AI agent hook auto-allow

kairos-chain 3.85.0 KairosChain is a Model Context Protocol (MCP) server for self-managed, evolvable AI skill definitions. It combines Pure Skills design (Ruby… 44,981 installs Sep 6 ruby

c4ed5c20b1995bc9b0c040873ef6145dcfa639eab7609f9dc1542b71cc898a0f K₂(Am₂Li)O₅(CCaErSXe₂)H₇(Cm₃₀Cr₈Db₁₁F₁₇Os₄Po₁₂U₄)Md₂(Pa₂)

50% New package, high download count

rails-hyperdrive 0.9.1 Rails Hyperdrive mounts an MCP (Model Context Protocol) server at /_hyperdrive/mcp in development, exposing introspection tools for AI codi… 6,289 installs Sep 6 ruby

772003e7a6aa9154832c5683474b348e24a0c283bcafce66bc402516d6892c6d H₆(Cm₅CrDb₄F₆OsPo₃)Md(Pa)

45% Unauthenticated local Ruby eval server

decoding 0.3.0 Decode dynamic values into known Ruby data structures 6,205 installs Sep 5 ruby

cf830b44669720316da12f8e6daf0842f4e97aba628b6121a5689ec37e6ed839 O(Xe)H₅(Cm₃DbFOsPo)Md(Pa)

48% AI agent hook auto-allow

dorian-yaml-deep-each 2.0.2 evaluates ruby code on deep each of yaml 4,285 installs Sep 5 ruby

7d308e7d96c8c69da4b2044d7be096936a663be8865d76877ade5364607264fa H(Po)

33% evaluates parsed YAML arguments

rails-hyperdrive 0.9.0 Rails Hyperdrive mounts an MCP (Model Context Protocol) server at /_hyperdrive/mcp in development, exposing introspection tools for AI codi… 5,640 installs Sep 5 ruby

49b2aea58ba73d0cb3d20d1d5dc68100924c7754017f03d5d0c2f1aa78e9a5d1 H₆(Cm₅CrDb₄F₆OsPo₃)Md(Pa)

46% New gem, dynamic eval, MCP server

rspec_trunk_flaky_tests 0.15.4.pre.beta.2 Integrates RSpec with Trunk Flaky Tests to automatically upload test results from your CI jobs. Enables accurate flaky test detection, quar… 147,234 installs Sep 4 ruby

cf4e9585d090bc1129a5cc028de01639301f882f42478d91842b3ffe6da235dd K(Li)H₂(CmOs₂)

34% fresh prerelease, unusual version

deskcrew-rails 1.0.2 Add customer support to a Rails app in one step: live chat widget, AI chatbot that answers from your knowledge base, a public help center,… 576 installs Sep 4 ruby

50501d6bd00424af79cfe9f19e55a5d4cd212c7aa389a529ee23a70d01640711 H₂(Cm₃Db)

33% New gem, remote image, HTTP calls

jekyll-deskcrew 1.0.2 Add customer support to a Jekyll blog, docs site or product site: a live chat widget, an AI chatbot that answers from your knowledge base,… 552 installs Sep 4 ruby

6ebc54acbf4ca9cd2d3867eefa1b6c4f2c8bc11540442e768db89eea14b515e8 H(Db)

33% New gem, typosquat-like name

yeptris 0.1.3.0 An FFI-based (no C extension) Ruby YAML library over libyeptris — Psych-compatible semantics with libleptris-class performance. The neutral… 1,821 installs Sep 4 ruby

46e160558a53be3c365ab83e547c85b8188b0b46d436e86868213012e3744603 H₂(Db₃Os)

33% Typosquatting of libyaml/psych

yeptris 0.1.2.1 An FFI-based (no C extension) Ruby YAML library over libyeptris — Psych-compatible semantics with libleptris-class performance. The neutral… 1,562 installs Sep 4 ruby

88493cc406df64a142f9146e072f415d151e2d3f6ee766ca1bb36fc8b1dd726f H₂(Db₃Os)

33% Typosquatting of libyaml/psych

pwn 0.5.719 https://github.com/0dayinc/pwn/README.md 1,055,198 installs Sep 2 ruby

24098874df242e6ebcd5c40c8aadfcbb0a3ff1612dbe7fdf2f1f03b8db7b9da4 K₃(Am₅Li₂Te₇)O₁₂(Er₃I₄P₅PrS₂XeAlAsC₃CaDy₂Eu)H₉(Cm₅₆Cr₈Db₁₆F₂₆HfOs₂₂Po₃₃TiU₃)Md₅(Bk₂LiPa₂)

66% legitimate security testing framework

hermeneutics 1.26 This library provides classes for generating and parsing mail, HTML and CSS. Further, it is a CGI library. 15,311 installs Sep 2 ruby

86245baf81f2f6f09241d013e65ae542632d39fb8e9932ca76373aa641733b32 O(Dy)H₄(Cm₂DbOsPo₄)

47% GPG decryption of fetched data

playbook_ui 17.1.0.pre.alpha.revert6481revert6400PLAY3001vcupdate18997 Playbook UI is built out in Ruby View Components and React Components. Playbook takes a modern design approach and applies it in a way that… 3,032,492 installs Sep 2 ruby

960f768d7d1eaa8da945d6488a2d5064856ce547eb711f20182da04e1a7789ff K(Li₃)H₉(Cm₁₅CrDb₁₆F₅Hf₂Os₆Po₂Ti₂U₈)Md₄(Pa₂Pt)

66% Typosquatted prerelease version name

srsh 1.0.1 A Unix shell written in Ruby with a structured scripting language for shell programs. 1,550 installs Sep 2 ruby

c904c466f1eaf960882e2fb82f9d34363ed558079dc808025796658fb3fa1b58 O(Dy)H₈(Cm₉CrDb₄DsF₇Os₄Po₇U₅)Md₃(BkPa)

64% systemfetch exfiltrates host info

rails_den 1.0.2 RailsDen is a full-featured Rails-native community platform from Oak Harbor Ventures, LLC. Distributed as one gem, RailsDen can run as a st… 972 installs Sep 2 ruby

7dadce1309d3ed1816215f463de80b6ea32e818fb354f63921229b185c7fac8b K(Li₂)O(C₂)H₉(Cm₂₇Cr₃Db₁₅F₅Hf₂Os₅Po₅TiU₈)Md

92% New package, high static score