MAL-2024-1341

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/rubygems/dependency_confusion123/MAL-2024-1341.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2024-1341
Published
2024-05-08T16:05:40Z
Modified
2024-05-08T16:05:40Z
Summary
Malicious code in dependency_confusion123 (RubyGems)
Details

-= Per source details. Do not edit below this line.=-

Source: ossf-package-analysis (d4d13afb7306711deba7679787e9c867a3285ab9deabbf0d1efcf452427cd004)

The OpenSSF Package Analysis project identified 'dependency_confusion123' @ 9.9.9 (rubygems) as malicious.

It is considered malicious because:

  • The package communicates with a domain associated with malicious activity.
Database specific 
{
    "malicious-packages-origins": [
        {
            "modified_time": "2024-05-08T16:05:40Z",
            "import_time": "2024-05-08T16:35:58.979962641Z",
            "versions": [
                "9.9.9"
            ],
            "source": "ossf-package-analysis",
            "sha256": "d4d13afb7306711deba7679787e9c867a3285ab9deabbf0d1efcf452427cd004"
        }
    ]
}
References
Credits

Affected packages

RubyGems / dependency_confusion123

Package

Name
dependency_confusion123
Purl
pkg:gem/dependency_confusion123

Affected ranges

Affected versions

9.*

9.9.9