VulnerabilityPublished 25 Jun 2024Updated 18 Jul 2026

acts-as_splittable (RubyGems) · Malicious Code

Affects acts-as_splittableSource GCVE Database

Severity

High

Rated by Threat Radar

Data as of 18 Jul 2026, 19:25 UTC

What to do

Affected software

Product	Affected	Fixed in
RubyGemsacts-as_splittable`pkg:gem/acts-as_splittable`Other threats	Affected =0.1.0	Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Users should avoid using acts-as_splittable version 0.1.0. Remove the package from any environments where it is installed. Monitor official RubyGems and OpenSSF advisories for updates or fixed versions before reinstallation.

Description

--- _-= Per source details. Do not edit below this line.=-_ ## Source: ghsa-malware (8c1f846ecc59cef4eeaa7ffacdd0b3547d2c4c1d5e019d3d20edb92bc6a87389) --- Credit: [OpenSSF](https://github.com/ossf/malicious-packages) ([source](https://github.com/ossf/malicious-packages/blob/9fbb5fba02ba2f02395d3d2d43c31b2c482b7a9d/osv/malicious/rubygems/acts-as_splittable/MAL-2024-6503.json))

Impact

Use of the acts-as_splittable version 0.1.0 package may lead to execution of malicious code within environments that install or run this package. The exact impact depends on the malicious payload but generally includes compromise of system integrity and confidentiality.

Summary

The acts-as_splittable RubyGem version 0.1.0 has been identified as containing malicious code by the OpenSSF project and is cataloged under MAL-2024-6503. This is a case of a malicious package in the RubyGems ecosystem, flagged by the GitHub Security Advisory (GHSA-6mg3-xmrx-6p4j). There is no detailed vulnerability or exploit mechanism described, only that the package itself is malicious.

References

Community reviews

Loading reviews…

What to do

Affected software

Description

AI analysisMachine-generated, updated 18 Jul 2026, 18:57 UTC

Technical details

References

Community reviews