MAL-2026-7802

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/rubygems/lambfetch004/MAL-2026-7802.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2026-7802
Aliases
  • GHSA-jpcc-6ff4-g9mm
Published
2026-07-07T11:54:13Z
Modified
2026-09-24T09:01:14Z
Summary
Malicious code in lambfetch004 (RubyGems)
Details

-= Per source details. Do not edit below this line.=-

Database specific 
{
    "malicious-packages-origins":  [
        {
            "id":  "RLMA-2026-02460",
            "import_time":  "2026-07-09T09:12:17.145244694Z",
            "modified_time":  "2026-07-07T11:54:13Z",
            "sha256":  "cb5edf470ccf67ad47df680c2a692011e0b90be779c2bc4ee78b50ca68ec078a",
            "source":  "reversing-labs",
            "versions":  [
                "0.0.1"
            ]
        },
        {
            "id":  "RLUA-2026-08275",
            "import_time":  "2026-09-24T08:47:42.338652497Z",
            "modified_time":  "2026-09-22T16:27:40Z",
            "sha256":  "14ee7256e3aac2c4210137dd36e11620c086a3d551fdcdb5f8bc566a9ad2603b",
            "source":  "reversing-labs"
        }
    ]
}
References
Credits

Affected packages

RubyGems / lambfetch004

Package

Name
lambfetch004
Purl
pkg:gem/lambfetch004

Affected ranges

Affected versions

0.*
0.0.1

Database specific

source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/rubygems/lambfetch004/MAL-2026-7802.json"