Ah, so were were supposed to look at the .yml files included in your exploit gem? Which contained some injected code that would then run on the rubygems server?
not my exploit gem. the code was in the metadata part and I believe someone else has posted it in this thread.