MAL-2024-6916

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/rubygems/font_awesome-sass-mixins/MAL-2024-6916.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2024-6916
Aliases
  • GHSA-7pvq-m2x2-wxvq
Published
2024-06-25T13:51:05Z
Modified
2026-07-18T11:04:55.338376174Z
Summary
Malicious code in font_awesome-sass-mixins (RubyGems)
Details

-= Per source details. Do not edit below this line.=-

## Source: ghsa-malware (acf20c09d7a04b3a3957f7517de6f02d6ad33d09157287a327909db9ab0258e1)

Credit: OpenSSF (source)

Database specific 
{
    "malicious-packages-origins": [
        {
            "import_time": "2024-06-28T02:52:34.333639996Z",
            "sha256": "ce15b93f5d0ebceb828f30a089482e716ca4ca12f80b0e984cc9a1b2aed86c12",
            "modified_time": "2024-06-25T13:51:05Z",
            "versions": [
                "4.7.0"
            ],
            "id": "RLMA-2024-05722",
            "source": "reversing-labs"
        },
        {
            "sha256": "0fef7187fcdba981327485b2bf8fc5ca2ff3e85b5492716bb4f9467b522b5c42",
            "import_time": "2024-10-24T01:01:16.65527608Z",
            "modified_time": "2024-10-16T15:03:26Z",
            "source": "reversing-labs",
            "id": "RLUA-2024-10241"
        },
        {
            "modified_time": "2026-07-18T01:57:12Z",
            "sha256": "acf20c09d7a04b3a3957f7517de6f02d6ad33d09157287a327909db9ab0258e1",
            "versions": [
                "4.7.0"
            ],
            "import_time": "2026-07-18T10:46:29.501468035Z",
            "source": "ghsa-malware",
            "id": "GHSA-7pvq-m2x2-wxvq"
        }
    ]
}
References
Credits

Affected packages

RubyGems / font_awesome-sass-mixins

Package

Name
font_awesome-sass-mixins
Purl
pkg:gem/font_awesome-sass-mixins

Affected ranges

Affected versions

4.*
4.7.0

Database specific

cwes 
[
    {
        "cweId": "CWE-506",
        "name": "Embedded Malicious Code",
        "description": "The product contains code that appears to be malicious in nature."
    }
]
source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/rubygems/font_awesome-sass-mixins/MAL-2024-6916.json"