MalwarePublished 25 Jun 2024Updated 18 Jul 2026

active_model-email-validator (RubyGems) · Malicious Code

Affects active_model-email-validatorSource GCVE Database

Malicious package : remove active_model-email-validator and rotate any secrets on hosts that installed it.

Data as of 18 Jul 2026, 19:25 UTC

Classification

Malicious package

Published to RubyGems · OSV MAL-2024-6448

What to do

Remove active_model-email-validator from every project, lockfile and image that pulls it in. Treat any host that installed it as compromised: rotate the credentials, tokens and keys it could read, from a clean machine.

Affected software

Product	Affected	Fixed in
RubyGemsactive_model-email-validator`pkg:gem/active_model-email-validator`Other threats	Affected =1.0.2	Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

Description

--- _-= Per source details. Do not edit below this line.=-_ ## Source: ghsa-malware (0d67a62ea1358400d339121b9dc39b7224e56044d1039c3c22703344fdec774e) --- Credit: [OpenSSF](https://github.com/ossf/malicious-packages) ([source](https://github.com/ossf/malicious-packages/blob/9fbb5fba02ba2f02395d3d2d43c31b2c482b7a9d/osv/malicious/rubygems/active_model-email-validator/MAL-2024-6448.json))

Impact

The presence of malicious code in a widely used package can lead to compromise of systems that install or use this specific version (1.0.2) of active_model-email-validator. The impact depends on the nature of the malicious code, which is not detailed here, but generally may include unauthorized code execution, data exfiltration, or other malicious activities.

Defensive guidance

Users should avoid using active_model-email-validator version 1.0.2 and remove it from their environments if present. Monitor vendor or RubyGems advisories for updates or safe versions. Since this is not a cloud service, remediation depends on user action.

Summary

active_model-email-validator version 1.0.2 is identified as containing malicious code. This package is part of the RubyGems ecosystem and has been flagged by the OpenSSF malicious packages database under MAL-2024-6448 and GHSA-22pf-p3cf-wq23. There is no detailed technical description of the malicious behavior or exploitation method provided. No known exploits in the wild have been reported.

References

Community reviews

Loading reviews…

What to do

Affected software

Description

AI analysisMachine-generated, updated 18 Jul 2026, 18:26 UTC

Technical details

References

Community reviews