Malicious code in diff-analysis (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 53f5c59231a450ff5c362e5a1f69715ca48a0ee311ba81d90daa03baef384a1d The OpenSSF Package Analysis project identified 'diff-analysis' @ 0.1.0.r8ff4356 rubygems as malicious. It is considered malicious because: - Th...

MAL-2025-46904 Malicious code in diff-analysis (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 53f5c59231a450ff5c362e5a1f69715ca48a0ee311ba81d90daa03baef384a1d The OpenSSF Package Analysis project identified 'diff-analysis' @ 0.1.0.r8ff4356 rubygems as malicious. It is considered malicious because: - Th...

MAL-2025-46901 Malicious code in dependency-graph-platform-proto (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c8feb4336c26b61a10aec616c9f9f8777fcdd99ab55df96c82ca78bd088530b9 The OpenSSF Package Analysis project identified 'dependency-graph-platform-proto' @ 99.99.99 rubygems as malicious. It is considered malicious...

MAL-2025-46900 Malicious code in delorean_client (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 91b594e6698684765fbf40d5f103e207d5e6166eeafd80ba5690100cab008a4c The OpenSSF Package Analysis project identified 'deloreanclient' @ 0.4.0.r09ee7b0 rubygems as malicious. It is considered malicious because: - T...

MAL-2025-46899 Malicious code in console_auth (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8c545bd0ca0111537f9336af6eeeef4e580a90a7468ff22cf9b1b20dd3fcf51d The OpenSSF Package Analysis project identified 'consoleauth' @ 99.99.99 rubygems as malicious. It is considered malicious because: - The packag...

Malicious code in console_auth (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8c545bd0ca0111537f9336af6eeeef4e580a90a7468ff22cf9b1b20dd3fcf51d The OpenSSF Package Analysis project identified 'consoleauth' @ 99.99.99 rubygems as malicious. It is considered malicious because: - The packag...

Malicious code in egress (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ee02802f5d94f135856b832109948906e7a3a39fbea753561a4d518a1d4e889f The OpenSSF Package Analysis project identified 'egress' @ 1.68.g52b0cd0 rubygems as malicious. It is considered malicious because: - The packag...

Malicious code in dependency-snapshots-api-proto (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 631057766f092650ba1257605bb896b689804a362934a08e7354ca7253f43b77 The OpenSSF Package Analysis project identified 'dependency-snapshots-api-proto' @ 99.99.99 rubygems as malicious. It is considered malicious...

Malicious code in github-kredz (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 537bf1dc9a46b4e69b596275e61de6d1b75ca3eeb2979bde507688f07458c088 The OpenSSF Package Analysis project identified 'github-kredz' @ 1.0.1.1135.gf4a4623f5 rubygems as malicious. It is considered malicious because...

MAL-2025-46908 Malicious code in github-kredz (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 537bf1dc9a46b4e69b596275e61de6d1b75ca3eeb2979bde507688f07458c088 The OpenSSF Package Analysis project identified 'github-kredz' @ 1.0.1.1135.gf4a4623f5 rubygems as malicious. It is considered malicious because...

Malicious code in omniauth-pro-sante-connect (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Linux Distros Unpatched Vulnerability : CVE-2012-2126

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RubyGems before 1.8.23 does not verify an SSL certificate, which allows remote attackers to modify a gem during installation via a man-in-the-middle attack...

Linux Distros Unpatched Vulnerability : CVE-2019-8321

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in RubyGems 2.6 and later through 3.0.2. Since Gem::UserInteractionverbose calls say without escaping, escape sequence injection is...

Linux Distros Unpatched Vulnerability : CVE-2019-8320

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A Directory Traversal issue was discovered in RubyGems 2.7.6 and later through 3.0.2. Before making new directories or touching files which now include...

Linux Distros Unpatched Vulnerability : CVE-2017-0903

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RubyGems versions between 2.0.0 and 2.6.13 are vulnerable to a possible remote code execution vulnerability. YAML deserialization of gem specifications can bypa...

RubyGems, PyPI Hit by Malicious Packages Stealing Credentials, Crypto, Forcing Security Changes

A fresh set of 60 malicious packages has been uncovered targeting the RubyGems ecosystem by posing as seemingly innocuous automation tools for social media, blogging, or messaging services to steal credentials from unsuspecting users and likely resell them on dark web forums like Russian Market...

Malicious code in webpack-dev-server (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in maventa_utils (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in icaret (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b2390fae7771a778a8bf020a3313113b56c56383c2178d916748a8d959678c9e The OpenSSF Package Analysis project identified 'icaret' @ 0.0.1 rubygems as malicious. It is considered malicious because: - The package...

Malicious code in message_gateway (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2781d258b292d5959839a52e0e940040defaae1ecbb1293c0d149dc5f6faf110 The OpenSSF Package Analysis project identified 'messagegateway' @ 0.0.1 rubygems as malicious. It is considered malicious because: - The packag...