VulnerabilityPublished 25 Jun 2024Updated 18 Jul 2026

aliyun-ruby_api (RubyGems) · Malicious Code

Affects aliyun-ruby_apiSource GCVE Database

Severity

High

Rated by Threat Radar

Data as of 19 Jul 2026, 01:10 UTC

What to do

Affected software

Product	Affected	Fixed in
RubyGemsaliyun-ruby_api`pkg:gem/aliyun-ruby_api`Other threats	Affected =0.0.3	Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Avoid using the 'aliyun-ruby_api' RubyGems package version 0.0.3. Monitor vendor or repository advisories for any updates or official remediation guidance.

Description

The RubyGems package 'aliyun-ruby_api' version 0.0.3 contains malicious code as identified by the OpenSSF malicious packages database. This package is flagged as a malicious package but no further technical details or exploitation methods are provided. There is no CVSS score assigned to this threat.

Impact

Use of the 'aliyun-ruby_api' version 0.0.3 package may result in execution of malicious code, potentially compromising the security of systems that include this package. Specific impacts are not detailed in the source data, but malicious packages generally pose risks such as data theft, unauthorized access, or system compromise.

Summary

The 'aliyun-ruby_api' RubyGems package version 0.0.3 has been identified as containing malicious code according to the OpenSSF malicious packages repository (MAL-2024-6577). This classification indicates that the package itself is intentionally harmful or compromised. No additional technical details, such as the nature of the malicious code or attack vectors, are provided in the source data. There is no known exploit in the wild reported at this time.

References

Community reviews

Loading reviews…

What to do

Affected software

Description

AI analysisMachine-generated, updated 19 Jul 2026, 01:10 UTC

Technical details

References

Community reviews