basic_stats (RubyGems) · Malicious Code
Affects basic_statsSource GCVE Database
Rated by Threat Radar
Data as of 19 Jul 2026, 00:51 UTC
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
RubyGemsbasic_statspkg:gem/basic_statsOther threats | Affected
| Fixed in– |
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
Users should avoid using the 'basic_stats' package version 0.0.2. It is recommended to remove this package from projects and dependency manifests if present. Monitor official RubyGems and OpenSSF advisories for updates or safer alternatives.
Description
The RubyGems package 'basic_stats' version 0.0.2 has been identified as containing malicious code. This is a supply chain threat where the package itself is intentionally harmful. There is no CVSS score available for this issue. No official patch or remediation guidance is provided in the source data. No known exploits in the wild have been reported.