Malicious code in seed-phrase-validator (RubyGems)

Source: amazon-inspector fb8d12a066c24d672bf16efe57267c46c727592ee21beb0e2accb3bb6e4bfb3a The gem declares a native extension but ships no C/C++/Rust source. extconf.rb exists solely to execute at gem install time. It decodes a base64-encoded Ruby payload and runs it via eval inside a detached fo...