The gem being targeted has one or more dashes in its name, e.g. something-provider. The word that comes before the first dash represents an attacker-controlled gem that exists on RubyGems.org. The gem ...