> From what we know right now, no other changes on our S3 bucket have taken place, and we're going to check the logs to make sure. Do you think it makes sense

> From what we know right now, no other changes on our S3 bucket have taken place, and we're going to check the logs to make sure. Do you think it makes sense to disable pulling down gems until you know for sure nothing in S3 is compromised?