arethusa-plugin_generator (RubyGems) · Malicious Code
Affects arethusa-plugin_generatorSource GCVE Database
Rated by Threat Radar
Data as of 19 Jul 2026, 00:59 UTC
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
RubyGemsarethusa-plugin_generatorpkg:gem/arethusa-plugin_generatorOther threats | Affected
| Fixed in– |
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
Users and organizations should avoid installing or using the 'arethusa-plugin_generator' RubyGems package version 0.0.1. If already installed, remove the package and verify system integrity. Monitor official advisories for updates or remediation guidance.
Description
The RubyGems package 'arethusa-plugin_generator' version 0.0.1 contains malicious code. This package is identified as a malicious package by the OpenSSF project and flagged in the GHSA database. No CVSS score or detailed technical exploit information is provided. There is no indication of known exploits in the wild or an official patch.