Malicious code in aem_deploy (RubyGems)

--- Credit: OpenSSF source...

Malicious Package

Overview aemdeploy is a malicious package. Affected versions of this package were found to be a Malicious Package, as it utilised typosquatting to run Malicious 3rd party scripts. It replaced genuine packages using an and replaced it with - and vice versa Remediation Avoid using aemdeploy...