Malicious code in proto-trust-metadata-api (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b87774d0bcfbcd33d81c38f3c6d26c986559b07bc1e15717164022afe4de346c The OpenSSF Package Analysis project identified 'proto-trust-metadata-api' @ 99.99.99 rubygems as malicious. It is considered malicious because:...

MAL-2025-46941 Malicious code in proto-trust-metadata-api (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b87774d0bcfbcd33d81c38f3c6d26c986559b07bc1e15717164022afe4de346c The OpenSSF Package Analysis project identified 'proto-trust-metadata-api' @ 99.99.99 rubygems as malicious. It is considered malicious because:...

UBUNTU-CVE-2017-14604

GNOME Nautilus before 3.23.90 allows attackers to spoof a file type by using the .desktop file extension, as demonstrated by an attack in which a .desktop file's Name field ends in .pdf but this file's Exec field launches a malicious "sh -c" command. In other words, Nautilus provides no UI...