Malicious code in solaan-ruby (RubyGems)

Source: amazon-inspector e44549858fa90854aa5c3acae5440714ef5271cabb67243d4c82713ca3c108f7 The gem's native-extension build script extconf.rb carries a base64-encoded Ruby payload that executes at gem install time via the standard mkmf build hook. The accompanying C source is a 2-line empty stub, ...

Malicious code in solaan-ruby (RubyGems)

RubyGems runs this gem's native extension script ext/solaan-ruby/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30 minute...

MAL-2026-17610 Malicious code in solaan-ruby (RubyGems)

RubyGems runs this gem's native extension script ext/solaan-ruby/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30 minute...