MAL-2024-6918

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/rubygems/font_fabulous/MAL-2024-6918.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2024-6918
Aliases
  • GHSA-f83h-gxwf-5j4p
Published
2024-06-25T13:51:06Z
Modified
2026-07-18T11:04:20.105275415Z
Summary
Malicious code in font_fabulous (RubyGems)
Details

-= Per source details. Do not edit below this line.=-

## Source: ghsa-malware (3e460b0f97ee5f5dbafe353dc7c657c3415ebb439e1cbbc5a1a371fd38490b75)

Credit: OpenSSF (source)

Database specific 
{
    "malicious-packages-origins": [
        {
            "modified_time": "2024-06-25T13:51:06Z",
            "sha256": "0989f0f8fc812a82deba867560038810bd87e9f61c94819d2720520d2fd56247",
            "versions": [
                "1.0.5"
            ],
            "import_time": "2024-06-28T02:52:34.554023617Z",
            "source": "reversing-labs",
            "id": "RLMA-2024-05724"
        },
        {
            "sha256": "ce9b677c9625e69d9b6c58ba6564dd6a64023bafcffa4fb8c95bb06af7a90eab",
            "import_time": "2024-10-24T01:01:16.780408063Z",
            "modified_time": "2024-10-16T15:03:27Z",
            "id": "RLUA-2024-10243",
            "source": "reversing-labs"
        },
        {
            "modified_time": "2026-07-18T01:57:16Z",
            "sha256": "3e460b0f97ee5f5dbafe353dc7c657c3415ebb439e1cbbc5a1a371fd38490b75",
            "versions": [
                "1.0.5"
            ],
            "import_time": "2026-07-18T10:46:30.130372959Z",
            "source": "ghsa-malware",
            "id": "GHSA-f83h-gxwf-5j4p"
        }
    ]
}
References
Credits

Affected packages

RubyGems / font_fabulous

Package

Name
font_fabulous
Purl
pkg:gem/font_fabulous

Affected ranges

Affected versions

1.*
1.0.5

Database specific

cwes 
[
    {
        "cweId": "CWE-506",
        "name": "Embedded Malicious Code",
        "description": "The product contains code that appears to be malicious in nature."
    }
]
source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/rubygems/font_fabulous/MAL-2024-6918.json"