bunto-test_plugin (RubyGems) · Malicious Code
Affects bunto-test_pluginSource GCVE Database
Rated by Threat Radar
Data as of 19 Jul 2026, 00:47 UTC
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
RubyGemsbunto-test_pluginpkg:gem/bunto-test_pluginOther threats | Affected
| Fixed in– |
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
Users should avoid using 'bunto-test_plugin' version 1.0.0 and remove it from their environments if present. Monitor vendor or repository advisories for updates or removal of the malicious package. Since this is a malicious package rather than a vulnerability in legitimate software, the primary mitigation is to not install or to uninstall the affected package.
Description
The RubyGems package 'bunto-test_plugin' version 1.0.0 contains malicious code. This package is identified as a malicious package by the OpenSSF project and is flagged in the GHSA and GCVE databases. No official patch or remediation guidance is currently provided. There is no evidence of known exploits in the wild at this time.