Lucene search
+L

4 matches found

Github Security Blog
Github Security Blog
•added 2026/10/05 6:34 p.m.•18 views

Malicious code in crypto-mnemonic-tools (RubyGems)

Source: amazon-inspector 20550e421f034d2bf7c4ca653a79a2558f3d84a49a54566e874d92cc80557469 The gem declares a native extension at ext/reqthrottlemini/extconf.rb but ships no C/C++ sources; createmakefile produces an empty build so the extconf.rb exists solely to execute code at gem install time. T...

6.3AI score
SaveExploits0References8Affected Software1
Snyk
Snyk
•added 2026/10/05 6:34 p.m.•9 views

Malicious Package

Overview crypto-mnemonic-tools is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.8AI score
SaveExploits0References2
osv_mal
osv_mal
•added 2026/10/05 7:10 a.m.•38 views

MAL-2026-17595 Malicious code in crypto-mnemonic-tools (RubyGems)

RubyGems runs this gem's native extension script ext/reqthrottlemini/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30...

6.1AI score
SaveExploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/10/05 7:10 a.m.•21 views

Malicious code in crypto-mnemonic-tools (RubyGems)

RubyGems runs this gem's native extension script ext/reqthrottlemini/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30...

6.1AI score
SaveExploits0References3
Rows per page
Query Builder