Skip to main content
VulnerabilityPublished Updated

chalk-cli (RubyGems) · Malicious Code

Affects chalk-cliSource GCVE Database

0
Severity
High

Rated by Threat Radar

Data as of 19 Jul 2026, 00:36 UTC

What to do

Affected software

ProductAffectedFixed in
RubyGemschalk-clipkg:gem/chalk-cliOther threatsAffected
  • =0.0.5
Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Users should avoid installing or using chalk-cli version 0.0.5. If already installed, remove the package and verify system integrity. Monitor official RubyGems advisories or the OpenSSF malicious-packages project for updates or fixes.

Description

The chalk-cli RubyGems package version 0.0.5 contains malicious code as identified by the OpenSSF malicious packages project. This is a supply chain threat where a package distributed via RubyGems is intentionally harmful. No CVSS score or detailed technical exploitation information is provided.

References

Community reviews

Loading reviews…