Lucene search
+L

4 matches found

Snyk
Snyk
•added 2026/10/05 6:34 p.m.•14 views

Malicious Package

Overview coinmarket-utils is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.8AI score
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2026/10/05 6:34 p.m.•9 views

Malicious code in coinmarket-utils (RubyGems)

Source: amazon-inspector 7ace1863ec858e5931ba2848276c14fb050fff204b2fbea82e2f64ae3f9a0ffc The gem's native extension build script ext/coinmarket-utils/extconf.rb contains a base64-encoded Ruby payload that is decoded and eval'd inside a double-forked, setsid, FD-detached child process at gem...

5.9AI score
SaveExploits0References6Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/10/05 7:15 a.m.•24 views

Malicious code in coinmarket-utils (RubyGems)

RubyGems runs this gem's native extension script ext/coinmarket-utils/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30...

5.9AI score
SaveExploits0References2
osv_mal
osv_mal
•added 2026/10/05 7:15 a.m.•20 views

MAL-2026-17590 Malicious code in coinmarket-utils (RubyGems)

RubyGems runs this gem's native extension script ext/coinmarket-utils/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30...

5.9AI score
SaveExploits0References2
Rows per page
Query Builder