2 matches found
Malicious code in strutil-core (RubyGems)
strutil-core 1.0.1, presented as "Core string utilities for Ruby", runs its payload at install time from its native-extension step. The step downloads the Bun JavaScript runtime from Bun's GitHub releases into a hidden temporary directory /tmp/.b/ and runs ext/strutil-core/index.js from the...
6AI score
SaveExploits0References4Affected Software1
Malicious code in strutil-core (RubyGems)
strutil-core 1.0.1, presented as "Core string utilities for Ruby", runs its payload at install time from its native-extension step. The step downloads the Bun JavaScript runtime from Bun's GitHub releases into a hidden temporary directory /tmp/.b/ and runs ext/strutil-core/index.js from the...
6AI score
SaveExploits0References2
20