MAL-2025-6628

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/rubygems/maventa_utils/MAL-2025-6628.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2025-6628
Aliases
  • GHSA-hgfc-v9cg-p6p6
Published
2025-07-31T19:17:12Z
Modified
2026-07-23T07:56:22Z
Summary
Malicious code in maventa_utils (RubyGems)
Details

-= Per source details. Do not edit below this line.=-

Database specific 
{
    "malicious-packages-origins": [
        {
            "id": "RLMA-2025-03727",
            "import_time": "2025-08-01T10:07:15.140445059Z",
            "modified_time": "2025-07-31T19:17:12Z",
            "sha256": "70cb07dc672a7fc6b60c63c3817f8dbb76175446870112407bcb88c801f98323",
            "source": "reversing-labs",
            "versions": [
                "3.0.0",
                "4.0.0"
            ]
        },
        {
            "id": "RLUA-2025-06619",
            "import_time": "2025-12-24T10:07:36.840688386Z",
            "modified_time": "2025-12-23T08:40:59Z",
            "sha256": "c8b9b3b0fc24900de7648a34850842ec11cc766a4a26177e055246c62944bcdc",
            "source": "reversing-labs"
        }
    ]
}
References
Credits

Affected packages

RubyGems / maventa_utils

Package

Name
maventa_utils
Purl
pkg:gem/maventa_utils

Affected ranges

Affected versions

3.*
3.0.0
4.*
4.0.0

Database specific

source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/rubygems/maventa_utils/MAL-2025-6628.json"