bosh_plugin-generator (RubyGems) · Malicious Code
Affects bosh_plugin-generatorSource GCVE Database
0
Severity
HighRated by Threat Radar
Data as of 19 Jul 2026, 00:47 UTC
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
RubyGemsbosh_plugin-generatorpkg:gem/bosh_plugin-generatorOther threats | Affected
| Fixed in– |
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
Avoid installing or using 'bosh_plugin-generator' version 0.0.1. Monitor official RubyGems advisories for any updates or remediation guidance regarding this package.
Description
The RubyGems package 'bosh_plugin-generator' version 0.0.1 contains malicious code as identified by the OpenSSF malicious packages project. This is a supply chain threat involving a malicious package published to the RubyGems ecosystem. No CVSS score is available for this issue.
References
Community reviews
Loading reviews…