commission-junction_stats (RubyGems) · Malicious Code
Affects commission-junction_statsSource GCVE Database
Rated by Threat Radar
Data as of 19 Jul 2026, 00:42 UTC
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
RubyGemscommission-junction_statspkg:gem/commission-junction_statsOther threats | Affected
| Fixed in– |
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
Users should avoid using version 0.0.2 of the 'commission-junction_stats' package. Consider removing or replacing this package with a trusted alternative. Monitor official sources for any future advisories or patches.
Description
The RubyGems package 'commission-junction_stats' version 0.0.2 contains malicious code as identified by the OpenSSF malicious packages database. This package is flagged as a security threat due to the presence of harmful code embedded within it. No official patch or remediation guidance is currently provided by the vendor or authoritative sources.