Skip to main content
VulnerabilityPublished Updated

alerty_plugin-slack (RubyGems) · Malicious Code

Affects alerty_plugin-slackSource GCVE Database

0
Severity
High

Rated by Threat Radar

Data as of 19 Jul 2026, 01:13 UTC

What to do

Affected software

ProductAffectedFixed in
RubyGemsalerty_plugin-slackpkg:gem/alerty_plugin-slackOther threatsAffected
  • =0.0.1
Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Users should avoid using alerty_plugin-slack version 0.0.1 and remove it from their environments if present. Monitor official RubyGems and OpenSSF advisories for updates or removal of the malicious package from repositories.

Description

The RubyGems package alerty_plugin-slack version 0.0.1 contains malicious code as identified by the OpenSSF and reported in the GHSA-malware database. This package is flagged as a malicious package rather than a traditional vulnerability. There is no CVSS score or detailed technical exploit information available. No patch or remediation guidance is currently provided by the vendor or authoritative sources.

References

Community reviews

Loading reviews…