VulnerabilityPublished 25 Jun 2024Updated 18 Jul 2026

acmesmith_verisign (RubyGems) · Malicious Code

Affects acmesmith_verisignSource GCVE Database

Severity

High

Rated by Threat Radar

Data as of 18 Jul 2026, 19:25 UTC

What to do

Affected software

Product	Affected	Fixed in
RubyGemsacmesmith_verisign`pkg:gem/acmesmith_verisign`Other threats	Affected =0.1.3	Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Until a fixed version or official guidance is available, avoid using the 'acmesmith_verisign' package version 0.1.3. Remove or replace this package if it is present in your environment.

Description

--- _-= Per source details. Do not edit below this line.=-_ ## Source: ghsa-malware (d34f8da9a09b6a6cb9d8130ea7bfd1daba1fedb7de89d5b760d55fddba34a91e) --- Credit: [OpenSSF](https://github.com/ossf/malicious-packages) ([source](https://github.com/ossf/malicious-packages/blob/9fbb5fba02ba2f02395d3d2d43c31b2c482b7a9d/osv/malicious/rubygems/acmesmith_verisign/MAL-2024-6360.json))

Impact

Use of the 'acmesmith_verisign' version 0.1.3 package may lead to execution of malicious code within affected environments. The specific impact depends on the malicious payload embedded in the package, which is not detailed in the provided data. There are no known exploits in the wild reported at this time.

Summary

The 'acmesmith_verisign' RubyGems package version 0.1.3 has been identified as containing malicious code. This classification comes from the OpenSSF malicious packages repository and is tracked under MAL-2024-6360 and GHSA-fvmv-px6v-52w9. The package is flagged as a security threat due to its malicious nature rather than a traditional vulnerability.

References

Community reviews

Loading reviews…

What to do

Affected software

Description

AI analysisMachine-generated, updated 18 Jul 2026, 17:28 UTC

Technical details

References

Community reviews