VulnerabilityPublished 25 Jun 2024Updated 18 Jul 2026

acme_pki (RubyGems) · Malicious Code

Affects acme_pkiSource GCVE Database

Severity

High

Rated by Threat Radar

Data as of 18 Jul 2026, 19:25 UTC

What to do

Affected software

Product	Affected	Fixed in
RubyGemsacme_pki`pkg:gem/acme_pki`Other threats	Affected =0.2.1	Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Avoid using 'acme_pki' version 0.2.1. Monitor official advisories for any updates or remediation guidance. No vendor advisory or official fix is currently available.

Description

--- _-= Per source details. Do not edit below this line.=-_ ## Source: ghsa-malware (38b4ca6c8aa7556e6844859cc0ff18790af2f47b54a32e0303b56b4601a2d7ff) --- Credit: [OpenSSF](https://github.com/ossf/malicious-packages) ([source](https://github.com/ossf/malicious-packages/blob/9fbb5fba02ba2f02395d3d2d43c31b2c482b7a9d/osv/malicious/rubygems/acme_pki/MAL-2024-6354.json))

Impact

Users who install 'acme_pki' version 0.2.1 may inadvertently execute malicious code embedded within the package. This can lead to compromise of the affected systems depending on the nature of the malicious payload, which is not detailed in the provided data. Since this is a malicious package, the impact is potentially severe but specifics are not disclosed.

Summary

The 'acme_pki' RubyGems package version 0.2.1 has been flagged as containing malicious code by the OpenSSF malicious packages initiative. This indicates that the package is a supply chain threat distributing harmful code to users who install this specific version. There is no detailed vulnerability or exploit data available, and no CVSS score has been assigned. The package is not a cloud service, and no known exploits in the wild have been reported.

References

Community reviews

Loading reviews…

What to do

Affected software

Description

AI analysisMachine-generated, updated 18 Jul 2026, 17:28 UTC

Technical details

References

Community reviews