1 line
1.3 KiB
JSON
1 line
1.3 KiB
JSON
{"schema_version":"1.7.5","id":"MAL-2025-2208","published":"2025-03-06T19:08:43Z","modified":"2026-07-23T07:54:57.045402286Z","aliases":["GHSA-vw39-jx4v-f5cj"],"summary":"Malicious code in evil_gem (RubyGems)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ossf-package-analysis (e1cbacc9bc6d36bcde7b6cb93df89df1fae5c8f70a841dc916a8ba6cdad2ff95)\nThe OpenSSF Package Analysis project identified 'evil_gem' @ 0.1.0 (rubygems) as malicious.\n\nIt is considered malicious because:\n\n- The package communicates with a domain associated with malicious activity.\n\n- The package executes one or more commands associated with malicious behavior.\n","affected":[{"package":{"name":"evil_gem","ecosystem":"RubyGems","purl":"pkg:gem/evil_gem"},"versions":["0.1.0"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/rubygems/evil_gem/MAL-2025-2208.json"}}],"database_specific":{"malicious-packages-origins":[{"import_time":"2025-03-06T19:34:18.529684333Z","modified_time":"2025-03-06T19:08:43Z","sha256":"e1cbacc9bc6d36bcde7b6cb93df89df1fae5c8f70a841dc916a8ba6cdad2ff95","source":"ossf-package-analysis","versions":["0.1.0"]}]},"credits":[{"name":"OpenSSF: Package Analysis","contact":["https://github.com/ossf/package-analysis","https://openssf.slack.com/channels/package_analysis"],"type":"FINDER"}]} |