Shai-Hulud

Malicious RubyGems package strutil-core carries a Shai-Hulud-derived credential-stealing worm

Socket researchers found that the RubyGems◆ package strutil-core◆ 1.0.1 runs a 5.48 MB credential-stealing worm at install time, using a native extension that downloads the Bun runtime. The payload is a new build of the testmetest worm from the Miasma family, which grew out of the public Shai-Hulud✱ toolkit. It collects cloud, CI, registry, SSH, AI coding tool and wallet credentials, tries to republish itself to RubyGems, npm and PyPI, and writes MCP servers and agent instructions into local configurations. RubyGems removed both versions, and no victims have been confirmed.