MAL-2026-9494

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/rubygems/wwandhg/MAL-2026-9494.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2026-9494
Aliases
  • GHSA-wf4h-fh4w-3mc9
Published
2026-07-07T12:11:04Z
Modified
2026-09-24T09:02:52Z
Summary
Malicious code in wwandhg (RubyGems)
Details

-= Per source details. Do not edit below this line.=-

Database specific 
{
    "malicious-packages-origins": [
        {
            "id": "RLMA-2026-04145",
            "import_time": "2026-07-09T09:14:59.844414654Z",
            "modified_time": "2026-07-07T12:11:04Z",
            "sha256": "4d29c4c0890d0dce1b2eea6a8edfc3a3f19d2e3803e5bd07b3cbf65ce17106a1",
            "source": "reversing-labs",
            "versions": [
                "0.0.1"
            ]
        },
        {
            "id": "RLUA-2026-10078",
            "import_time": "2026-09-24T08:50:07.463747351Z",
            "modified_time": "2026-09-22T16:52:18Z",
            "sha256": "f64962b6ab409de4a2be854330f0c399d3b8ca51ccf0df3687be8d124b25c677",
            "source": "reversing-labs"
        }
    ]
}
References
Credits

Affected packages

RubyGems / wwandhg

Package

Name
wwandhg
Purl
pkg:gem/wwandhg

Affected ranges

Affected versions

0.*
0.0.1

Database specific

source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/rubygems/wwandhg/MAL-2026-9494.json"