{"uuid": "e3a3f92e-561e-4e8d-a334-805a2440ac5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-mrrh-fwg8-r2c3", "type": "seen", "source": "https://bsky.app/profile/levelbrook.bsky.social/post/3mvmfznhknj2w", "content": "Sure. Ruby Central's own writeup of the May campaign (500+ yanked gems, attempts to grab other users' API keys): https://blog.rubygems.org/2026/09/11/update-may-spam-publishing-campaign.html\n\nThe moving-tag one was tj-actions, CVE-2025-30066: https://github.com/advisories/GHSA-mrrh-fwg8-r2c3", "creation_timestamp": "2026-09-16T05:32:46.134006Z"}