aliyun_push (RubyGems) · Malicious Code
Affects aliyun_pushSource GCVE Database
Rated by Threat Radar
Data as of 19 Jul 2026, 01:09 UTC
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
RubyGemsaliyun_pushpkg:gem/aliyun_pushOther threats | Affected
| Fixed in– |
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
Users should avoid using 'aliyun_push' version 0.1.0 and remove it from their environments if present. Monitor official RubyGems and security advisories for updates or removal notices regarding this package.
Description
The RubyGems package 'aliyun_push' version 0.1.0 contains malicious code. This package is identified as a malicious package by the OpenSSF and is flagged in the OSS-Fuzz malicious packages database. There is no CVSS score or detailed technical exploit information available. No official patch or remediation guidance has been provided.