codestats_metrics-reporter (RubyGems) · Malicious Code
Affects codestats_metrics-reporterSource GCVE Database
Rated by Threat Radar
Data as of 19 Jul 2026, 00:43 UTC
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
RubyGemscodestats_metrics-reporterpkg:gem/codestats_metrics-reporterOther threats | Affected
| Fixed in– |
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
Avoid using the codestats_metrics-reporter package version 0.1.13. Monitor official RubyGems and security advisories for updates or fixes related to this package.
Description
The RubyGems package codestats_metrics-reporter version 0.1.13 contains malicious code as identified by the OpenSSF project. This package is flagged as a malicious package, indicating it may perform unauthorized or harmful actions when used. There is no CVSS score or detailed technical exploit information available. No official patch or remediation guidance is provided at this time.