allocation-stats (RubyGems) · Malicious Code
Affects allocation-statsSource GCVE Database
Rated by Threat Radar
Data as of 19 Jul 2026, 01:09 UTC
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
RubyGemsallocation-statspkg:gem/allocation-statsOther threats | Affected
| Fixed in– |
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
Avoid using the 'allocation-stats' RubyGems package version 0.1.5. Since this is a malicious package, the recommended mitigation is to remove or not install this version. Users should verify package integrity and source before installation.
Description
The RubyGems package 'allocation-stats' version 0.1.5 contains malicious code as identified by the OpenSSF malicious packages project. This package is flagged as a malicious package rather than a traditional vulnerability with a patch. No CVSS score or detailed technical exploit information is provided.