Skip to main content
VulnerabilityPublished Updated

arb-spider (RubyGems) · Malicious Code

Affects arb-spiderSource GCVE Database

0
Severity
High

Rated by Threat Radar

Data as of 19 Jul 2026, 01:00 UTC

What to do

Affected software

ProductAffectedFixed in
RubyGemsarb-spiderpkg:gem/arb-spiderOther threatsAffected
  • =1.1.2
Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Avoid using the 'arb-spider' RubyGems package version 1.1.2. Remove any existing installations of this version. Monitor official advisories for updates or remediation guidance.

Description

The RubyGems package 'arb-spider' version 1.1.2 contains malicious code as identified by the OpenSSF malicious packages project. This is a supply chain threat where the package itself is intentionally harmful. No CVSS score or detailed technical exploitation information is provided.

References

Community reviews

Loading reviews…