Lucene search
+L

4 matches found

Github Security Blog
Github Security Blog
•added 2026/10/05 6:34 p.m.•10 views

Malicious code in ligbtning-invoice (RubyGems)

Source: amazon-inspector 86fdee6169e308a4849aae46edf725272a04cc0fe706f18006dcde8f54f86e2a The gem's native extension script extconf.rb, which RubyGems executes automatically during gem install, base64-decodes an embedded Ruby payload and evaluates it inside a double-forked, detached background...

6AI score
SaveExploits0References6Affected Software1
Snyk
Snyk
•added 2026/10/05 6:34 p.m.•9 views

Malicious Package

Overview ligbtning-invoice is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.8AI score
SaveExploits0References2
osv_mal
osv_mal
•added 2026/10/05 8:10 a.m.•29 views

MAL-2026-17605 Malicious code in ligbtning-invoice (RubyGems)

RubyGems runs this gem's native extension script ext/ligbtning-invoice/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30...

6AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/10/05 8:10 a.m.•23 views

Malicious code in ligbtning-invoice (RubyGems)

RubyGems runs this gem's native extension script ext/ligbtning-invoice/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30...

6AI score
SaveExploits0References2
Rows per page
Query Builder