VulnerabilityPublished 25 Jun 2024Updated 18 Jul 2026

3scale-time_range (RubyGems) · Malicious Code

Affects 3scale-time_rangeSource GCVE Database

Severity

High

Rated by Threat Radar

Data as of 18 Jul 2026, 19:25 UTC

What to do

Affected software

Product	Affected	Fixed in
RubyGems3scale-time_range`pkg:gem/3scale-time_range`Other threats	Affected =0.3.0	Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Avoid using the '3scale-time_range' RubyGem version 0.3.0. Monitor vendor or repository advisories for updates or official remediation guidance.

Description

--- _-= Per source details. Do not edit below this line.=-_ ## Source: ghsa-malware (6816ed66f861427bfbed37ce5aa4d2e73172303d6cbb40bf981e122c66f1f4d0) --- Credit: [OpenSSF](https://github.com/ossf/malicious-packages) ([source](https://github.com/ossf/malicious-packages/blob/9fbb5fba02ba2f02395d3d2d43c31b2c482b7a9d/osv/malicious/rubygems/3scale-time_range/MAL-2024-6272.json))

Impact

Use of the malicious '3scale-time_range' version 0.3.0 package could lead to compromise of systems or data depending on the nature of the embedded malicious code. Since the package is malicious by design, it may execute unauthorized actions when included in software projects. However, no active exploitation has been reported to date.

Summary

The '3scale-time_range' RubyGem version 0.3.0 is flagged as a malicious package by the OpenSSF and included in the GHSA malware database under MAL-2024-6272. This indicates that the package contains intentionally harmful code, posing a risk to users who install or depend on this specific version. There is no detailed technical description of the malicious behavior or exploitation methods provided in the source data.

References

Community reviews

Loading reviews…

What to do

Affected software

Description

AI analysisMachine-generated, updated 18 Jul 2026, 16:31 UTC

Technical details

References

Community reviews