BufferZoneCorp Supply Chain Attack Hits Ruby and Go
Date Observed: Late April 2026Ecosystem: RubyGems and Go ModulesTargets: Developers, CI runners, and GitHub Actions pipelinesAttack Type: Malicious package campaign, credential theft, CI poisoning, and SSH persistenceImpact: Secret exposure, build tampering, poisoned dependency resolution, and possible long-term runner access Key Takeaways The BufferZoneCorp campaign targeted developer systems and CI environments with Ruby gems and Go […]