SleeperGem Exposes the CI Blind Spot in RubyGems Supply-Chain Security

A reported RubyGems campaign called SleeperGem used CI-aware evasion to target developer laptops instead of build pipelines. For technology leaders, the incident sharpens a costly reality: software supply-chain trust now extends well beyond CI/CD.