Rubygems.org compromised
I'm sorry to mention some RG projects are still "potentially" dangerous: <a href="https://gemnasium.com/rubygems" rel="nofollow">https://gemnasium.com/rubygems</a>
We'll do our best to help determining if these projects really need to be updated asap!