VulnerabilityPublished 25 Jun 2024Updated 18 Jul 2026

battle_on (RubyGems) · Malicious Code

Affects battle_onSource GCVE Database

Severity

High

Rated by Threat Radar

Data as of 19 Jul 2026, 00:50 UTC

What to do

Affected software

Product	Affected	Fixed in
RubyGemsbattle_on`pkg:gem/battle_on`Other threats	Affected =0.0.4	Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Avoid using the 'battle_on' RubyGems package version 0.0.4. Monitor official RubyGems sources and the OpenSSF malicious packages repository for updates or safer alternatives.

Description

The RubyGems package 'battle_on' version 0.0.4 contains malicious code as identified by the OpenSSF malicious packages project. This is a supply chain threat where the package itself is intentionally harmful. No CVSS score is available for this threat.

Impact

Use of the 'battle_on' version 0.0.4 package may lead to execution of malicious code, potentially compromising systems that install or run this package. The exact impact is not detailed, but malicious packages typically pose risks such as data theft, system compromise, or unauthorized access.

Summary

The 'battle_on' RubyGems package at version 0.0.4 has been flagged as containing malicious code by the OpenSSF malicious-packages repository. This indicates that the package is intentionally crafted to perform harmful actions when used. There is no detailed technical description or exploitation method provided. The package is not a cloud service, and no known exploits in the wild have been reported.

References

Community reviews

Loading reviews…

What to do

Affected software

Description

AI analysisMachine-generated, updated 19 Jul 2026, 00:50 UTC

Technical details

References

Community reviews