Skip to main content
VulnerabilityPublished Updated

active-record_stats (RubyGems) · Malicious Code

Affects active-record_statsSource GCVE Database

0
Severity
High

Rated by Threat Radar

Data as of 18 Jul 2026, 19:25 UTC

What to do

Affected software

ProductAffectedFixed in
RubyGemsactive-record_statspkg:gem/active-record_statsOther threatsAffected
  • =0.1.5
Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Avoid using active-record_stats version 0.1.5. Remove or replace this package with a trusted alternative or a version verified to be clean. Monitor official RubyGems advisories or OpenSSF updates for further guidance.

Description

--- _-= Per source details. Do not edit below this line.=-_ ## Source: ghsa-malware (c3587172664bf0ff23b4c3a0be87f92918005308750a32ee7530b95a53331713) --- Credit: [OpenSSF](https://github.com/ossf/malicious-packages) ([source](https://github.com/ossf/malicious-packages/blob/9fbb5fba02ba2f02395d3d2d43c31b2c482b7a9d/osv/malicious/rubygems/active-record_stats/MAL-2024-6433.json))

References

Community reviews

Loading reviews…