Dealing with (Hypothetical) Sham Ruby Packages
blog.rubygems.org