Skip to main content
VulnerabilityPublished Updated

action-pubsub (RubyGems) · Malicious Code

Affects action-pubsubSource GCVE Database

0
Severity
High

Rated by Threat Radar

Data as of 18 Jul 2026, 19:25 UTC

What to do

Affected software

ProductAffectedFixed in
RubyGemsaction-pubsubpkg:gem/action-pubsubOther threatsAffected
  • =0.2.1
Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Avoid using the 'action-pubsub' RubyGems package version 0.2.1. Remove any existing installations of this version from your environment. Monitor official RubyGems and OpenSSF advisories for updates or replacement packages.

Description

--- _-= Per source details. Do not edit below this line.=-_ ## Source: ghsa-malware (32085d02262c9c9240b27397352614b85713e47897a21c720ffc44944839c053) --- Credit: [OpenSSF](https://github.com/ossf/malicious-packages) ([source](https://github.com/ossf/malicious-packages/blob/9fbb5fba02ba2f02395d3d2d43c31b2c482b7a9d/osv/malicious/rubygems/action-pubsub/MAL-2024-6382.json))

References

Community reviews

Loading reviews…