Skip to main content
VulnerabilityPublished Updated

atlassian-plugin_installer (RubyGems) · Malicious Code

Affects atlassian-plugin_installerSource GCVE Database

0
Severity
High

Rated by Threat Radar

Data as of 19 Jul 2026, 00:55 UTC

What to do

Affected software

ProductAffectedFixed in
RubyGemsatlassian-plugin_installerpkg:gem/atlassian-plugin_installerOther threatsAffected
  • =0.1.3
Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Avoid using the 'atlassian-plugin_installer' package version 0.1.3. Monitor official RubyGems and security advisories for updates or remediation guidance.

Description

The RubyGems package 'atlassian-plugin_installer' version 0.1.3 contains malicious code. This package is identified as a malicious package by the OpenSSF and flagged in the GCVE database. No CVSS score or detailed technical exploit information is provided.

References

Community reviews

Loading reviews…