If anyone finds compromised gems they should report them to the RubyGems.org security team immediately.