MAL-2026-7964

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/rubygems/lbyvpipwpi/MAL-2026-7964.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2026-7964
Aliases
  • GHSA-vm74-c933-jccv
Published
2026-07-07T11:55:44Z
Modified
2026-09-24T09:01:49Z
Summary
Malicious code in lbyvpipwpi (RubyGems)
Details

-= Per source details. Do not edit below this line.=-

Database specific 
{
    "malicious-packages-origins": [
        {
            "id": "RLMA-2026-02615",
            "import_time": "2026-07-09T09:12:33.469663087Z",
            "modified_time": "2026-07-07T11:55:44Z",
            "sha256": "50c6b09bfef067fee74089d2efb5a6c8cb33f0a2524ed1d4193b51019c86544c",
            "source": "reversing-labs",
            "versions": [
                "0.0.1"
            ]
        },
        {
            "id": "RLUA-2026-08432",
            "import_time": "2026-09-24T08:47:54.871630165Z",
            "modified_time": "2026-09-22T16:29:40Z",
            "sha256": "ace1034ce511971ef539592684532dcd226102b2e4742e3f03e9fce07736c2c4",
            "source": "reversing-labs"
        }
    ]
}
References
Credits

Affected packages

RubyGems / lbyvpipwpi

Package

Name
lbyvpipwpi
Purl
pkg:gem/lbyvpipwpi

Affected ranges

Affected versions

0.*
0.0.1

Database specific

source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/rubygems/lbyvpipwpi/MAL-2026-7964.json"