Malicious code in cheesebox (RubyGems)

Source: amazon-inspector 5b03698e5384db9f041d0e2caa51db10abc0d0dcbfc1e5e77b795acc4d8cec76 The gem declares mkrfconf.rb as a native extension in its gemspec, causing it to execute automatically during gem install. On execution the script reads installer-side system files /etc/passwd, /etc/hosts,...