Lucene search
+L

4 matches found

Github Security Blog
Github Security Blog
•added 2026/10/11 3:31 p.m.•25 views

Malicious code in staking-apr-fetcher (RubyGems)

Source: amazon-inspector 405ab5b9651b8e8817ae91290042ec22673c5c99c1b58f45747e47cbb85aeacf The gem declares a native extension whose build script extconf.rb decodes a base64-embedded Ruby payload and executes it via eval during gem install. The payload double-forks a detached background process th...

5.9AI score
SaveExploits0References4Affected Software1
Snyk
Snyk
•added 2026/10/11 3:31 p.m.•11 views

Malicious Package

Overview staking-apr-fetcher is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.9AI score
SaveExploits0References2
osv_mal
osv_mal
•added 2026/10/11 7:35 a.m.•23 views

MAL-2026-17796 Malicious code in staking-apr-fetcher (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 405ab5b9651b8e8817ae91290042ec22673c5c99c1b58f45747e47cbb85aeacf The gem declares a native extension whose build script extconf.rb decodes a base64-embedded Ruby payload and executes it via eval during gem install...

5.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/10/11 7:35 a.m.•16 views

Malicious code in staking-apr-fetcher (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 405ab5b9651b8e8817ae91290042ec22673c5c99c1b58f45747e47cbb85aeacf The gem declares a native extension whose build script extconf.rb decodes a base64-embedded Ruby payload and executes it via eval during gem install...

5.9AI score
SaveExploits0References1
Rows per page
Query Builder