Threat actors are publishing RubyGems packages that include scrapers targeting public-facing UK government servers, but with no clear objective.