5626 matches found
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code containing a malicious binding.gyp file that drops and runs a self-propagating cloud secret stealer. The malicious code attempts to exfiltrate AWS, GCP, Azure, Vault, and Kubernetes credentials, as well as npm an...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code containing a malicious binding.gyp file that drops and runs a self-propagating cloud secret stealer. The malicious code attempts to exfiltrate AWS, GCP, Azure, Vault, and Kubernetes credentials, as well as npm an...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code containing a malicious binding.gyp file that drops and runs a self-propagating cloud secret stealer. The malicious code attempts to exfiltrate AWS, GCP, Azure, Vault, and Kubernetes credentials, as well as npm an...
RubyGems Suspends New Signups After Hundreds of Malicious Packages Are Uploaded
RubyGems , the standard package manager for the Ruby programming language, has temporarily paused account signups following what has been described as a "major malicious attack." "We're dealing with a major malicious attack on RubyGems right now," Maciej Mensfeld, senior product manager for...
RHCOS 1 : rubygems (RHSA-2013:1203)
The remote Red Hat Enterprise Linux CoreOS 1 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2013:1203 advisory. - rubygems: Two security fixes in v1.8.23 CVE-2012-2125, CVE-2012-2126 Note that Nessus has not tested for these issues but has...
RHCOS 2 : rubygems (RHSA-2014:0207)
The remote Red Hat Enterprise Linux CoreOS 2 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2014:0207 advisory. - rubygems: version regex algorithmic complexity vulnerability CVE-2013-4287 Note that Nessus has not tested for this issue but has instead...
MAL-2026-2816 Malicious code in monolith-twirp-pullsd-users (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in gitlab-orchestrator (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
ruby: Cookie prefix spoofing in CGI::Cookie.parse
A flaw was found in Ruby. RubyGems cgi gem could allow a remote attacker to conduct spoofing attacks caused by the mishandling of security prefixes in cookie names in the CGI::Cookie.parse function. By sending a specially-crafted request, an attacker could perform cookie prefix spoofing attacks...
Malicious code in monolith-twirp-pullsd-teams (RubyGems)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b0a21f2e863ad85bc56da074019b5369ed68dc7280d0c81ff65dd8425308c7f6 The OpenSSF Package Analysis project identified 'monolith-twirp-pullsd-teams' @ 1.1.1 rubygems as malicious. It is considered malicious because:...
MAL-2026-2259 Malicious code in monolith-twirp-loops-core (RubyGems)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8d4a98f58930eb7f736a5c69a6cf5de5b6dd033785255d4d55ae1da5a5866629 The OpenSSF Package Analysis project identified 'monolith-twirp-loops-core' @ 1.0.2 rubygems as malicious. It is considered malicious because: -...
Malicious code in plugin-gem-example (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in testcatplzignore (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-1922 Malicious code in rubylogger (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in rubylogger (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-1921 Malicious code in resolvrtest (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-1919 Malicious code in rafka-rb (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in rafka-rb (RubyGems)
--- -= Per source details. Do not edit below this line.=-...