chalk-henson (RubyGems) · Malicious Code
Affects chalk-hensonSource GCVE Database
Rated by Threat Radar
Data as of 19 Jul 2026, 00:36 UTC
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
RubyGemschalk-hensonpkg:gem/chalk-hensonOther threats | Affected
| Fixed in– |
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
Users should avoid using the 'chalk-henson' package version 0.3.7 and remove it from their environments if present. Consider replacing it with a trusted alternative. Monitor vendor or repository advisories for any updates or remediation instructions.
Description
The RubyGems package 'chalk-henson' version 0.3.7 has been identified as containing malicious code. This package is flagged as a malicious package by the OpenSSF and related sources. No specific technical details about the nature of the malicious code or its behavior are provided in the available data.