A diligent developer’s security practices have uncovered a dangerous backdoor in a popular Ruby library for checking the password strength of user-chosen passwords. The malicious code would check if the library was being used in a test or production environment.

Read full article on ZDNet