A malicious Ruby gem steals developer credentials, plants AI tool backdoors, and can delete victims' home folders.