Lucene search
+L

4 matches found

Github Security Blog
Github Security Blog
•added 2026/10/05 6:34 p.m.•9 views

Malicious code in lightning-invoice-utils (RubyGems)

Source: amazon-inspector b1c7aa63129491dc29eaf240d8f4ae910733b8f6f34192279c119c3cb585c68d The gem declares a native extension extconf.rb that is auto-executed by gem install, but the shipped C stub InitLightningInvoiceUtils is empty — the native-extension slot is a cover. extconf.rb base64-decode...

5.9AI score
SaveExploits0References6Affected Software1
Snyk
Snyk
•added 2026/10/05 6:34 p.m.•10 views

Malicious Package

Overview lightning-invoice-utils is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packa...

9.8CVSS5.8AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/10/05 7:35 a.m.•25 views

Malicious code in lightning-invoice-utils (RubyGems)

RubyGems runs this gem's native extension script ext/lightning-invoice-utils/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is ov...

5.9AI score
SaveExploits0References2
osv_mal
osv_mal
•added 2026/10/05 7:35 a.m.•30 views

MAL-2026-17608 Malicious code in lightning-invoice-utils (RubyGems)

RubyGems runs this gem's native extension script ext/lightning-invoice-utils/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is ov...

5.9AI score
SaveExploits0References2
Rows per page
Query Builder