allq-client (RubyGems) · Malicious Code
Affects allq-clientSource GCVE Database
Rated by Threat Radar
Data as of 19 Jul 2026, 01:09 UTC
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
RubyGemsallq-clientpkg:gem/allq-clientOther threats | Affected
| Fixed in– |
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
Avoid using the 'allq-client' RubyGems package version 1.1.1. Remove it from any environments where it is installed. Since this is a malicious package, do not trust or use this version. Monitor vendor or repository advisories for updates or removal notices.
Description
The RubyGems package 'allq-client' version 1.1.1 contains malicious code as identified by the OpenSSF malicious packages project. This package is flagged as a malicious package rather than a traditional vulnerability. No CVSS score or detailed technical exploit information is provided.