Skip to main content
VulnerabilityPublished Updated

activemerchant_clickandbuy (RubyGems) · Malicious Code

Affects activemerchant_clickandbuySource GCVE Database

0
Severity
High

Rated by Threat Radar

Data as of 18 Jul 2026, 19:25 UTC

What to do

Affected software

ProductAffectedFixed in
RubyGemsactivemerchant_clickandbuypkg:gem/activemerchant_clickandbuyOther threatsAffected
  • =0.2.0
Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Users should remove this package from their projects and replace it with a trusted alternative. Monitor vendor or repository advisories for any updates or official guidance.

Description

--- _-= Per source details. Do not edit below this line.=-_ ## Source: ghsa-malware (d513e93b5e9c4f622f1b9acea726e52a636a93747425572d91376c2b711ba68c) --- Credit: [OpenSSF](https://github.com/ossf/malicious-packages) ([source](https://github.com/ossf/malicious-packages/blob/9fbb5fba02ba2f02395d3d2d43c31b2c482b7a9d/osv/malicious/rubygems/activemerchant_clickandbuy/MAL-2024-6457.json))

References

Community reviews

Loading reviews…