MAL-2026-9992

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/rubygems/zztxtwtmp05/MAL-2026-9992.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2026-9992
Aliases
  • GHSA-2pxx-p3xh-qj6q
Published
2026-07-07T12:15:55Z
Modified
2026-07-18T11:05:29.536542506Z
Summary
Malicious code in zztxtwtmp05 (RubyGems)
Details

-= Per source details. Do not edit below this line.=-

## Source: ghsa-malware (395a2747617485255b7f6566c59ca148b5d59b3acd44e256f943aa8875474f99)

Credit: OpenSSF (source)

Database specific 
{
    "malicious-packages-origins": [
        {
            "import_time": "2026-07-09T09:15:46.488048809Z",
            "source": "reversing-labs",
            "sha256": "f080c42a1e86b3415e5b96cf93dd12a23eba0c7866776454d94ec72071b4dbeb",
            "versions": [
                "0.0.1"
            ],
            "id": "RLMA-2026-04643",
            "modified_time": "2026-07-07T12:15:55Z"
        },
        {
            "import_time": "2026-07-18T10:46:28.639143733Z",
            "source": "ghsa-malware",
            "sha256": "395a2747617485255b7f6566c59ca148b5d59b3acd44e256f943aa8875474f99",
            "versions": [
                "0.0.1"
            ],
            "id": "GHSA-2pxx-p3xh-qj6q",
            "modified_time": "2026-07-18T01:59:04Z"
        }
    ]
}
References
Credits

Affected packages

RubyGems / zztxtwtmp05

Package

Name
zztxtwtmp05
Purl
pkg:gem/zztxtwtmp05

Affected ranges

Affected versions

0.*
0.0.1

Database specific

cwes 
[
    {
        "cweId": "CWE-506",
        "name": "Embedded Malicious Code",
        "description": "The product contains code that appears to be malicious in nature."
    }
]
source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/rubygems/zztxtwtmp05/MAL-2026-9992.json"