MAL-2026-7484 Malicious code in aidoklxlhvfkeq (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7481 Malicious code in aicaltdfdlekz (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7482 Malicious code in aicaltroixtqg (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in aicalojdhdxoa (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7480 Malicious code in aicalojdhdxoa (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in agfosssacre22 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in agfossstd21 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7478 Malicious code in agfossstd21 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7477 Malicious code in agfosssacre22 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7476 Malicious code in agfosslic24 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in agfossgrant23 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in agentoaitestabc123 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in agfosscab20 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in abcfoobar1778550629075869 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in a0a_arcgraph (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in a00_arcguide (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-6432 Malicious code in rstreams-metrics (npm)

The rstreams-metrics npm package was compromised as part of the Miasma worm campaign targeting the LeoPlatform npm ecosystem. On June 24, 2026, 20 LeoPlatform packages were published within a 3-second window by a threat actor who had taken over the npm account czirker belonging to the LeoPlatform...

MAL-2026-6118 Malicious code in final-poc-usa (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6cc39e355e69ec11b0532da1e2b2a418601a4c5594b100ba6f054f0e52be44be The OpenSSF Package Analysis project identified 'final-poc-usa' @ 0.99800.0 rubygems as malicious. It is considered malicious because: - The...

MAL-2026-6117 Malicious code in final-shoaib (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f67c342dc8bb7b3c1a396b89796f09865373db04cd9b08034e6087bf47b324ef The OpenSSF Package Analysis project identified 'final-shoaib' @ 1.0.0 rubygems as malicious. It is considered malicious because: - The package...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code containing a malicious binding.gyp file that drops and runs a self-propagating cloud secret stealer. The malicious code attempts to exfiltrate AWS, GCP, Azure, Vault, and Kubernetes credentials, as well as npm an...