authnd-client (RubyGems) · Malicious Code
Affects authnd-clientSource GCVE Database
Rated by Threat Radar
Data as of 19 Jul 2026, 00:34 UTC
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| RubyGemsauthnd-client | Affected
| Fixed in– |
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
Users should avoid installing or using the 'authnd-client' package version 99.99.99. If already installed, remove the package and review systems for any suspicious activity. Monitor the vendor or OpenSSF advisories for updates or fixes. Since this is a malicious package, the best mitigation is to prevent its use.
Description
The RubyGems package 'authnd-client' version 99.99.99 has been identified as malicious by the OpenSSF Package Analysis project. This package executes one or more commands associated with malicious behavior, indicating it is a threat to users who install it. No official patch or remediation guidance is provided, and no known exploits in the wild have been reported. The package is not a cloud service, and the vendor has not issued an advisory or fix at this time.