MAL-2024-1341

Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/rubygems/dependency_confusion123/MAL-2024-1341.json
Published
2024-05-08T16:05:40Z
Modified
2024-05-08T16:05:40Z
Summary
Malicious code in dependency_confusion123 (RubyGems)
Details

-= Per source details. Do not edit below this line.=-

Source: ossf-package-analysis (d4d13afb7306711deba7679787e9c867a3285ab9deabbf0d1efcf452427cd004)

The OpenSSF Package Analysis project identified 'dependency_confusion123' @ 9.9.9 (rubygems) as malicious.

It is considered malicious because:

  • The package communicates with a domain associated with malicious activity.
References

Affected packages

RubyGems / dependency_confusion123

Affected ranges

Affected versions

9.*

9.9.9