VulnerabilityPublished 25 Jun 2024Updated 18 Jul 2026

ability-list (RubyGems) · Malicious Code

Affects ability-listSource GCVE Database

Severity

High

Rated by Threat Radar

Data as of 18 Jul 2026, 19:25 UTC

What to do

Affected software

Product	Affected	Fixed in
RubyGemsability-list`pkg:gem/ability-list`Other threats	Affected =0.0.4	Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Avoid using the 'ability-list' RubyGems package version 0.0.4. Monitor official advisories for any updates or remediation guidance.

Description

--- _-= Per source details. Do not edit below this line.=-_ ## Source: ghsa-malware (5033a3689a9c561a4849bc1370e7da89696400314cc45b6c77b03d2cc6b63fd5) --- Credit: [OpenSSF](https://github.com/ossf/malicious-packages) ([source](https://github.com/ossf/malicious-packages/blob/9fbb5fba02ba2f02395d3d2d43c31b2c482b7a9d/osv/malicious/rubygems/ability-list/MAL-2024-6326.json))

Impact

Use of the 'ability-list' version 0.0.4 package may introduce malicious code into dependent projects, potentially compromising the security and integrity of systems that incorporate this package. The exact nature and consequences of the malicious code are not detailed in the available data.

Summary

The 'ability-list' RubyGems package version 0.0.4 has been flagged as containing malicious code. This classification comes from the OpenSSF malicious packages database and is tracked under MAL-2024-6326 and GHSA-8r5v-87q4-w9g9. There is no CVSS score or detailed technical vulnerability description available, indicating this is a supply chain threat involving a malicious package rather than a software flaw.

References

Community reviews

Loading reviews…

What to do

Affected software

Description

AI analysisMachine-generated, updated 18 Jul 2026, 17:14 UTC

Technical details

References

Community reviews