chalk-thrift (RubyGems) · Malicious Code
Affects chalk-thriftSource GCVE Database
Rated by Threat Radar
Data as of 19 Jul 2026, 00:35 UTC
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
RubyGemschalk-thriftpkg:gem/chalk-thriftOther threats | Affected
| Fixed in– |
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
Avoid using the 'chalk-thrift' package version 0.1.17. Since this is a malicious package rather than a vulnerability with a patch, remediation involves removing or not installing this package version. Check for alternative trusted packages or versions.
Description
The RubyGems package 'chalk-thrift' version 0.1.17 contains malicious code as identified by the OpenSSF malicious packages database. This is a supply chain threat involving a malicious package published to the RubyGems ecosystem. No CVSS score or detailed technical exploit information is provided.