Summary
According to a post on X by @_josehelps citing Socket, the Ruby gem strutil-core 1.0.1 runs its payload on a plain gem install or bundle install. The payload reportedly steals credentials, plants an MCP server and hooks, and commits .claude/settings.json, .cursor/mcp.json and AGENTS.md files into repositories using stolen Git tokens. It also reportedly wipes the home folder if the stolen GitHub token is revoked, so the post advises removing net-health-checker and pkg-runtime before revoking tokens. The post also mentions two AI gateways exposing MCP endpoints without auth, but the snippet cuts off before giving details.
AI-assisted summary based on the listed source.
What happened
Socket says strutil-core 1.0.1 runs its payload on a plain gem install or bundle install, steals credentials, plants an MCP server and hooks, commits .claude/settings.json, .cursor/mcp.json and AGENTS.md files into repos with stolen Git tokens, and wipes the home folder if the stolen GitHub token is revoked, so...
Why it matters
Developers who install Ruby gems and use AI coding agents such as Claude or Cursor could have credentials and repositories affected. Anyone who may have installed strutil-core should check for net-health-checker and pkg-runtime and remove them before revoking any tokens. Watch for Socket's full technical report and clearer details on the AI gateway exposure.
Signal Intelligence
Signal Strength 95%
Technical label WATCH
Public Interest 45
Category OPEN SOURCE
Reader Depth TECHNICAL
Signal Strength reflects source quality, relevance, freshness and evidence. Public Interest helps organize discovery; it is not proof of truth.
Public Interest components
Recognizable Entity Score 51
Practical Impact Score 28
Novelty Interest Score 70
Consequence Score 46
Curiosity Score 16
Shareability Score 37
Why this is here
VQV surfaced this signal because it is recent, relevant to AI Coding Tools, connected to Scobleizer News Pulse (X).
