Malicious code in cryoto-toolbox (RubyGems)

Source: amazon-inspector 3fcf75a196193219b146e937b6d9a7cf8937df152658a2d7b7b8905605c9f8a6 The gem declares ext/cryoto-toolbox/extconf.rb as a native extension, which rubygems executes during gem install. Before the single createmakefile call, the script evaluates a base64 blob that XOR-decodes a...

Malicious Package

Overview cryoto-toolbox is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2026-17592 Malicious code in cryoto-toolbox (RubyGems)

RubyGems runs this gem's native extension script ext/cryoto-toolbox/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30...

Malicious code in cryoto-toolbox (RubyGems)

RubyGems runs this gem's native extension script ext/cryoto-toolbox/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30...