VulnerabilityPublished 25 Jun 2024Updated 18 Jul 2026

3scale-client (RubyGems) · Malicious Code

Affects 3scale-clientSource GCVE Database

Severity

High

Rated by Threat Radar

Data as of 18 Jul 2026, 19:25 UTC

What to do

Affected software

Product	Affected	Fixed in
RubyGems3scale-client`pkg:gem/3scale-client`Other threats	Affected =2.11.0	Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Avoid installing or using version 2.11.0 of the 3scale-client RubyGem. Check official sources for any forthcoming remediation or replacement versions.

Description

--- _-= Per source details. Do not edit below this line.=-_ ## Source: ghsa-malware (40996227e5a6da82d9d68a5f88dafb72ab1c4d21e3904a1d936a0977e96b8415) --- Credit: [OpenSSF](https://github.com/ossf/malicious-packages) ([source](https://github.com/ossf/malicious-packages/blob/9fbb5fba02ba2f02395d3d2d43c31b2c482b7a9d/osv/malicious/rubygems/3scale-client/MAL-2024-6270.json))

Impact

Users who install version 2.11.0 of the 3scale-client RubyGem may be exposed to malicious code execution or other harmful effects inherent to the malicious package. No confirmed exploits in the wild have been reported, and the exact impact depends on the malicious payload embedded in the package.

Summary

The 3scale-client package version 2.11.0 on RubyGems is flagged as malicious code by the OpenSSF malicious packages database. This indicates that the package itself contains harmful code intended to compromise users who install it. There is no additional technical detail or vendor advisory available to clarify the nature of the malicious code or its impact.

References

Community reviews

Loading reviews…

What to do

Affected software

Description

AI analysisMachine-generated, updated 18 Jul 2026, 16:31 UTC

Technical details

References

Community reviews