{"uuid": "4bdbe288-13fe-4c8c-9cf9-b14fb4284b7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-30066", "type": "seen", "source": "https://bsky.app/profile/levelbrook.bsky.social/post/3mvmfznhknj2w", "content": "Sure. Ruby Central's own writeup of the May campaign (500+ yanked gems, attempts to grab other users' API keys): https://blog.rubygems.org/2026/09/11/update-may-spam-publishing-campaign.html\n\nThe moving-tag one was tj-actions, CVE-2025-30066: https://github.com/advisories/GHSA-mrrh-fwg8-r2c3", "creation_timestamp": "2026-09-16T05:32:46.082418Z"}