Skip to main content
VulnerabilityPublished Updated

a-stupid_test_gem · Malicious Code

Affects a-stupid_test_gemSource GCVE Database

0
Severity
High

Rated by Threat Radar

Data as of 18 Jul 2026, 19:25 UTC

What to do

Affected software

ProductAffectedFixed in
RubyGemsa-stupid_test_gempkg:gem/a-stupid_test_gemOther threatsAffected
  • =0.0.2
Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Since this is a malicious package, the primary mitigation is to avoid installing or using version 0.0.2 of 'a-stupid_test_gem'. Users should remove this package if installed and source dependencies from trusted and verified packages only.

Description

--- _-= Per source details. Do not edit below this line.=-_ ## Source: ghsa-malware (eb39ea144a02e88ea51cf4b71478fee1eccc0d433f744dd501e597f88c2ba3c8) --- Credit: [OpenSSF](https://github.com/ossf/malicious-packages) ([source](https://github.com/ossf/malicious-packages/blob/9fbb5fba02ba2f02395d3d2d43c31b2c482b7a9d/osv/malicious/rubygems/a-stupid_test_gem/MAL-2024-6277.json))

References

Community reviews

Loading reviews…