MAL-2026-17089

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/rubygems/bunler/MAL-2026-17089.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2026-17089
Published
2026-09-22T16:20:46Z
Modified
2026-09-24T09:30:13Z
Summary
Malicious code in bunler (RubyGems)
Details

-= Per source details. Do not edit below this line.=-

Database specific 
{
    "malicious-packages-origins":  [
        {
            "id":  "RLMA-2026-07775",
            "import_time":  "2026-09-24T09:21:25.254191754Z",
            "modified_time":  "2026-09-22T16:20:46Z",
            "sha256":  "72b42684bc857b2384d56cacbd15d5bd2bcdea6290faf89aef19487be091f54e",
            "source":  "reversing-labs",
            "versions":  [
                "1.0.36464"
            ]
        }
    ]
}
Credits

Affected packages

RubyGems / bunler

Package

Name
bunler
Purl
pkg:gem/bunler

Affected ranges

Affected versions

1.*
1.0.36464

Database specific

source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/rubygems/bunler/MAL-2026-17089.json"