RubyGems Under Attack

I'm surprised this isn't receiving more attention.

I realize supply chain attacks are all the rage now-a-days, but this is the first time I've seen this ecosystem come under attack.

Looking forward to the additional context that is (hopefully) forth-coming.

So the hostile takeover in the name of security is going well, I gather?