alias-class (RubyGems) · Malicious Code
Affects alias-classSource GCVE Database
Rated by Threat Radar
Data as of 19 Jul 2026, 01:12 UTC
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
RubyGemsalias-classpkg:gem/alias-classOther threats | Affected
| Fixed in– |
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
Avoid using the 'alias-class' RubyGems package version 0.1.0. Monitor official RubyGems advisories or the OpenSSF malicious packages repository for updates or safe replacement versions.
Description
The RubyGems package 'alias-class' version 0.1.0 has been identified as containing malicious code. This is a supply chain threat involving a malicious package published to the RubyGems ecosystem. No CVSS score is assigned to this threat. There is no indication of known exploits in the wild or an official patch. The malicious nature of the package poses a risk to developers who install or use this specific version.