VulnerabilityPublished 25 Jun 2024Updated 18 Jul 2026

aliyun_odps (RubyGems) · Malicious Code

Affects aliyun_odpsSource GCVE Database

Severity

High

Rated by Threat Radar

Data as of 19 Jul 2026, 01:09 UTC

What to do

Affected software

Product	Affected	Fixed in
RubyGemsaliyun_odps`pkg:gem/aliyun_odps`Other threats	Affected =0.4.2	Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Avoid using 'aliyun_odps' version 0.4.2. Monitor official advisories for updates or fixed releases.

Description

The RubyGems package 'aliyun_odps' version 0.4.2 contains malicious code as identified by the OpenSSF malicious packages database. This is a supply chain threat involving a malicious package published to the RubyGems ecosystem. No CVSS score or detailed technical exploit information is provided.

Impact

Users who install or use 'aliyun_odps' version 0.4.2 may be exposed to malicious code execution or other harmful effects inherent to the malicious package. This can compromise system integrity, confidentiality, or availability depending on the payload of the malicious code. No known exploits in the wild have been reported.

Summary

The 'aliyun_odps' RubyGems package version 0.4.2 has been flagged as containing malicious code according to the OpenSSF malicious packages repository (MAL-2024-6583). This indicates the package itself is intentionally harmful or compromised, posing a risk to users who install or use this specific version. There is no detailed vulnerability or exploit data beyond the classification as a malicious package.

References

Community reviews

Loading reviews…

What to do

Affected software

Description

AI analysisMachine-generated, updated 19 Jul 2026, 01:09 UTC

Technical details

References

Community reviews