MAL-2024-6428

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/rubygems/active-record_fix_integer_limit/MAL-2024-6428.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2024-6428
Aliases
  • GHSA-g7ch-pf96-wcf7
Published
2024-06-25T13:46:27Z
Modified
2026-07-18T11:02:35.195894210Z
Summary
Malicious code in active-record_fix_integer_limit (RubyGems)
Details

-= Per source details. Do not edit below this line.=-

## Source: ghsa-malware (dc2a08adb7fc4e3a78741ebe2212820272948bc512fe0ab2a82719372497da93)

Credit: OpenSSF (source)

Database specific 
{
    "malicious-packages-origins": [
        {
            "source": "reversing-labs",
            "sha256": "164e0c1bccec877e5da1052daf1fbfb3696c3720c763b973f3324953ddbee9f2",
            "import_time": "2024-06-28T02:51:36.577347815Z",
            "modified_time": "2024-06-25T13:46:27Z",
            "id": "RLMA-2024-05235",
            "versions": [
                "0.1.7"
            ]
        },
        {
            "sha256": "dd54dd49fb46de8ab982e45fbc8cea03dfcdb79d3dfa44c7767f5f19a0dc50cc",
            "modified_time": "2024-10-16T14:57:01Z",
            "import_time": "2024-10-24T01:00:41.035551758Z",
            "source": "reversing-labs",
            "id": "RLUA-2024-09754"
        },
        {
            "import_time": "2026-07-18T10:46:30.287207276Z",
            "sha256": "dc2a08adb7fc4e3a78741ebe2212820272948bc512fe0ab2a82719372497da93",
            "modified_time": "2026-07-18T01:56:47Z",
            "versions": [
                "0.1.7"
            ],
            "id": "GHSA-g7ch-pf96-wcf7",
            "source": "ghsa-malware"
        }
    ]
}
References
Credits

Affected packages

RubyGems / active-record_fix_integer_limit

Package

Name
active-record_fix_integer_limit
Purl
pkg:gem/active-record_fix_integer_limit

Affected ranges

Affected versions

0.*
0.1.7

Database specific

cwes 
[
    {
        "cweId": "CWE-506",
        "name": "Embedded Malicious Code",
        "description": "The product contains code that appears to be malicious in nature."
    }
]
source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/rubygems/active-record_fix_integer_limit/MAL-2024-6428.json"