[seanhandley]

To save app developers manually trawling dozens of gems and duplicating work, we need to have somewhere that people can publicly disclose gems they've found to be compromised.

[davidradcliffe]

If anyone finds compromised gems they should report them to the RubyGems.org security team immediately.