VulnerabilityPublished 25 Jun 2024Updated 18 Jul 2026

acme_heisenberg (RubyGems) · Malicious Code

Affects acme_heisenbergSource GCVE Database

Severity

High

Rated by Threat Radar

Data as of 18 Jul 2026, 19:25 UTC

What to do

Affected software

Product	Affected	Fixed in
RubyGemsacme_heisenberg`pkg:gem/acme_heisenberg`Other threats	Affected =0.0.1	Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Avoid using the 'acme_heisenberg' RubyGems package version 0.0.1. Monitor dependency sources and use trusted package repositories to prevent supply chain risks.

Description

--- _-= Per source details. Do not edit below this line.=-_ ## Source: ghsa-malware (8559a791074b5d4f8190101d874b3162b5ac354d741c3a23c332fcbff43529c4) --- Credit: [OpenSSF](https://github.com/ossf/malicious-packages) ([source](https://github.com/ossf/malicious-packages/blob/9fbb5fba02ba2f02395d3d2d43c31b2c482b7a9d/osv/malicious/rubygems/acme_heisenberg/MAL-2024-6352.json))

Impact

Use of the malicious 'acme_heisenberg' package version 0.0.1 could lead to compromise of systems or data depending on the nature of the embedded malicious code. Since this is a malicious package, the impact is potentially severe if the package is installed and executed in a development or production environment.

Summary

The 'acme_heisenberg' RubyGems package version 0.0.1 is identified as containing malicious code according to the OpenSSF malicious packages repository (MAL-2024-6352). This is a supply chain threat where the package itself is malicious rather than a vulnerability in the package code. There is no CVSS score or detailed technical vulnerability description available.

References

Community reviews

Loading reviews…

What to do

Affected software

Description

AI analysisMachine-generated, updated 18 Jul 2026, 17:27 UTC

Technical details

References

Community reviews