MAL-2024-6847

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/rubygems/current-weather/MAL-2024-6847.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2024-6847
Aliases
  • GHSA-8xmf-pwf9-9qf7
Published
2024-06-25T13:50:25Z
Modified
2026-07-23T07:53:13.712328102Z
Summary
Malicious code in current-weather (RubyGems)
Details

-= Per source details. Do not edit below this line.=-

Database specific 
{
    "malicious-packages-origins": [
        {
            "sha256": "726d31b20bf0fceede13e57b2e29dd3acd46a214e56f61a8925a72430f19e9a5",
            "modified_time": "2024-06-25T13:50:25Z",
            "versions": [
                "0.0.4"
            ],
            "source": "reversing-labs",
            "import_time": "2024-06-28T02:52:26.340893174Z",
            "id": "RLMA-2024-05653"
        },
        {
            "modified_time": "2024-10-16T15:02:35Z",
            "source": "reversing-labs",
            "sha256": "7849c2e5f5b0f36eb5c969c162d4e8153e5f33a557ca505e6b5f69f7f16c6803",
            "import_time": "2024-10-24T01:01:11.732768898Z",
            "id": "RLUA-2024-10172"
        }
    ]
}
References
Credits

Affected packages

RubyGems / current-weather

Package

Name
current-weather
Purl
pkg:gem/current-weather

Affected ranges

Affected versions

0.*
0.0.4

Database specific

source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/rubygems/current-weather/MAL-2024-6847.json"