MAL-2024-6922

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/rubygems/foot-stats/MAL-2024-6922.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2024-6922
Aliases
  • GHSA-ghf5-hchp-g5v7
Published
2024-06-25T13:51:08Z
Modified
2026-07-18T11:03:30.071760567Z
Summary
Malicious code in foot-stats (RubyGems)
Details

-= Per source details. Do not edit below this line.=-

## Source: ghsa-malware (efad63073d1a1a9a159369445dbb92caf4027ba84fb6cace4d5a7684416d5f7a)

Credit: OpenSSF (source)

Database specific 
{
    "malicious-packages-origins": [
        {
            "import_time": "2024-06-28T02:52:34.991329124Z",
            "sha256": "852f0de9e2a75b837896f6b2381ebeba60d39e78f800567b07b0632581618315",
            "modified_time": "2024-06-25T13:51:08Z",
            "versions": [
                "0.1.0"
            ],
            "id": "RLMA-2024-05728",
            "source": "reversing-labs"
        },
        {
            "sha256": "99628555f7b0a4ee6be6f7db45452b3cabaee9831d42eb5386a7e3cd4cdb1afb",
            "modified_time": "2024-10-16T15:03:31Z",
            "import_time": "2024-10-24T01:01:17.111910852Z",
            "source": "reversing-labs",
            "id": "RLUA-2024-10247"
        },
        {
            "modified_time": "2026-07-18T01:57:20Z",
            "sha256": "efad63073d1a1a9a159369445dbb92caf4027ba84fb6cace4d5a7684416d5f7a",
            "versions": [
                "0.1.0"
            ],
            "import_time": "2026-07-18T10:46:30.357356234Z",
            "source": "ghsa-malware",
            "id": "GHSA-ghf5-hchp-g5v7"
        }
    ]
}
References
Credits

Affected packages

RubyGems / foot-stats

Package

Name
foot-stats
Purl
pkg:gem/foot-stats

Affected ranges

Affected versions

0.*
0.1.0

Database specific

cwes 
[
    {
        "cweId": "CWE-506",
        "name": "Embedded Malicious Code",
        "description": "The product contains code that appears to be malicious in nature."
    }
]
source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/rubygems/foot-stats/MAL-2024-6922.json"