VulnerabilityPublished 23 Dec 2025Updated 18 Jul 2026

critter (RubyGems) · Malicious Code

Affects critterSource GCVE Database

Severity

High

Rated by Threat Radar

Data as of 19 Jul 2026, 00:35 UTC

What to do

Affected software

Product	Affected	Fixed in
RubyGemscritter`pkg:gem/critter`Other threats	Affected =90002.0	Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Avoid using the 'critter' RubyGems package version 90002.0. Verify dependencies and sources before installation to prevent inclusion of malicious packages.

Description

The RubyGems package 'critter' version 90002.0 is identified as containing malicious code. This is a case of a malicious package rather than a traditional vulnerability. There is no CVSS score or detailed technical exploit information available. No known exploits in the wild have been reported. No patch or remediation guidance is provided.

Impact

Use of the 'critter' RubyGems package version 90002.0 may result in execution of malicious code, potentially compromising systems or data depending on the payload. Since this is a malicious package, the impact depends on the nature of the embedded malicious code, which is not detailed here. No known active exploitation has been reported.

Summary

The 'critter' RubyGems package at version 90002.0 has been flagged as malicious code by the OpenSSF malicious packages database. This is not a vulnerability in the traditional sense but a case of a package containing harmful or unauthorized code. No further technical details or exploit methods are documented.

References

github.com/advisories/GHSA-f93c-chq5-5xvv (opens in a new tab)

Community reviews

Loading reviews…

What to do

Affected software

Description

AI analysisMachine-generated, updated 19 Jul 2026, 00:35 UTC

Technical details

References

Community reviews