The Air of Malicious Ruby Gems

Most of the time, if I have something that's not on Ruby gems that I want, it's in a GitHub repo somewhere. It does occur when you're using something like sidekick enterprise or some of the other gems out there that have a paid option. They have their own gem repository that you're going to pull your libraries from. If they've got a gem that's named something different or named the same as something that's in Ruby gems, I could see it confusing the two and pulling the wrong thing.