Skip to main content
VulnerabilityPublished Updated

alephant_publisher-queue (RubyGems) · Malicious Code

Affects alephant_publisher-queueSource GCVE Database

0
Severity
High

Rated by Threat Radar

Data as of 19 Jul 2026, 01:14 UTC

What to do

Affected software

ProductAffectedFixed in
RubyGemsalephant_publisher-queuepkg:gem/alephant_publisher-queueOther threatsAffected
  • =2.6.0
Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Users should avoid using alephant_publisher-queue version 2.6.0 and remove it if already installed. Monitor official RubyGems advisories or the OpenSSF malicious packages repository for updates or replacement versions.

Description

The alephant_publisher-queue RubyGem version 2.6.0 contains malicious code as identified by the OpenSSF malicious packages project. This package is flagged as a malicious package rather than a traditional vulnerability. No CVSS score or detailed technical exploitation information is provided.

References

Community reviews

Loading reviews…