asset-link (RubyGems) · Malicious Code
Affects asset-linkSource GCVE Database
Rated by Threat Radar
Data as of 19 Jul 2026, 00:57 UTC
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
RubyGemsasset-linkpkg:gem/asset-linkOther threats | Affected
| Fixed in– |
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
Avoid using the 'asset-link' package version 0.0.2. Remove it from any environments where it is installed. Since this is a malicious package, remediation involves not installing or uninstalling the package rather than applying a patch. Monitor trusted sources like the OpenSSF malicious packages list for updates.
Description
The RubyGems package 'asset-link' version 0.0.2 has been identified as containing malicious code. This is a case of a malicious package rather than a traditional vulnerability. No CVSS score or detailed technical exploitation data is provided.