aliyun-sls (RubyGems) · Malicious Code
Affects aliyun-slsSource GCVE Database
Rated by Threat Radar
Data as of 19 Jul 2026, 01:10 UTC
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
RubyGemsaliyun-slspkg:gem/aliyun-slsOther threats | Affected
| Fixed in– |
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
Users should avoid installing or using version 0.0.7 of the 'aliyun-sls' RubyGems package. It is recommended to verify the integrity and trustworthiness of packages before installation and to monitor vendor or repository advisories for updates or removals related to this package.
Description
The RubyGems package 'aliyun-sls' version 0.0.7 contains malicious code as identified by the OpenSSF malicious packages project. This package is flagged as a malicious package rather than a traditional vulnerability. No patch or remediation information is provided, and no known exploits in the wild have been reported.