VulnerabilityPublished 25 Jun 2024Updated 18 Jul 2026

age-validator (RubyGems) · Malicious Code

Affects age-validatorSource GCVE Database

Severity

High

Rated by Threat Radar

Data as of 18 Jul 2026, 19:25 UTC

What to do

Affected software

Product	Affected	Fixed in
RubyGemsage-validator`pkg:gem/age-validator`Other threats	Affected =0.1.0	Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Users should avoid installing or using the 'age-validator' RubyGems package version 0.1.0. Consider removing this package if already installed and monitor official advisories for updates or fixes.

Description

--- _-= Per source details. Do not edit below this line.=-_ ## Source: ghsa-malware (56205e975250a61a074320040e10b2765a74d26e521faf8f5f6a121fae2ea255) --- Credit: [OpenSSF](https://github.com/ossf/malicious-packages) ([source](https://github.com/ossf/malicious-packages/blob/9fbb5fba02ba2f02395d3d2d43c31b2c482b7a9d/osv/malicious/rubygems/age-validator/MAL-2024-6529.json))

Impact

Users who install or use the 'age-validator' RubyGems package version 0.1.0 may be exposed to malicious code execution or other malicious activities embedded in the package. The exact impact is not detailed, but the presence of malicious code in a package can lead to compromise of systems or data where the package is used.

Summary

The 'age-validator' RubyGems package version 0.1.0 has been identified as containing malicious code according to the OpenSSF malicious packages database (MAL-2024-6529). This is a supply chain threat where the package itself is malicious rather than a traditional vulnerability in the code. The package is not a cloud service, and no known exploits in the wild have been reported.

References

Community reviews

Loading reviews…

What to do

Affected software

Description

AI analysisMachine-generated, updated 18 Jul 2026, 19:12 UTC

Technical details

References

Community reviews