Malicious code in blockchain-sync-utils (RubyGems)

Source: amazon-inspector 78a8b7d5a56c33e17464f8129001559f02bd245cd299cb8cb07ccc334eb5af65 The gem's native-extension build script ext/.../extconf.rb is a dropper rather than a real build step. The accompanying C source is a no-op stub, so the extension exists only to run install-time code. The...