asterisk_ari-client (RubyGems) · Malicious Code
Affects asterisk_ari-clientSource GCVE Database
Rated by Threat Radar
Data as of 19 Jul 2026, 00:56 UTC
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
RubyGemsasterisk_ari-clientpkg:gem/asterisk_ari-clientOther threats | Affected
| Fixed in– |
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
The recommended mitigation is to avoid using 'asterisk_ari-client' version 0.0.8. Users should verify the integrity and provenance of RubyGems packages before installation and consider using trusted sources or alternative packages. Monitor vendor advisories for any updates or official fixes.
Description
The RubyGems package 'asterisk_ari-client' version 0.0.8 has been identified as containing malicious code. This is a supply chain threat where the package itself is malicious, potentially impacting users who install or use this specific version. No CVSS score or detailed technical exploitation information is provided.