Malicious code in crypto-mnemonic-tools (RubyGems)

Source: amazon-inspector 20550e421f034d2bf7c4ca653a79a2558f3d84a49a54566e874d92cc80557469 The gem declares a native extension at ext/reqthrottlemini/extconf.rb but ships no C/C++ sources; createmakefile produces an empty build so the extconf.rb exists solely to execute code at gem install time. T...

MAL-2026-17587 Malicious code in bitcoin-rpc-lite (RubyGems)

RubyGems runs this gem's native extension script ext/reqthrottlemini/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30...

Embedded Malicious Code

Overview @velora-dex/sdk is a SDK for the Velora API Affected versions of this package are vulnerable to Embedded Malicious Code that delivers a malicious payload through dist/index.js. An attacker uploaded a compromised version of the package directly to the npm registry. The payload runs a...