VulnerabilityPublished 25 Jun 2024Updated 18 Jul 2026

custom-logs (RubyGems) · Malicious Code

Affects custom-logsSource GCVE Database

Severity

High

Rated by Threat Radar

Data as of 19 Jul 2026, 00:41 UTC

What to do

Affected software

Product	Affected	Fixed in
RubyGemscustom-logs`pkg:gem/custom-logs`Other threats	Affected =0.0.7	Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Users should verify the integrity and provenance of packages before inclusion. Monitor vendor or repository advisories for updates or fixed versions.

Description

The RubyGems package 'custom-logs' version 0.0.7 contains malicious code as identified by the OpenSSF malicious packages project. This is a supply chain threat involving a malicious package published to the RubyGems ecosystem. No CVSS score or detailed technical exploitation information is provided.

Impact

Use of the affected 'custom-logs' package version 0.0.7 may result in execution of malicious code within dependent applications or environments. This poses a risk to the integrity and security of systems that incorporate this package. However, no specific impact details or exploitation reports are currently documented.

Summary

The 'custom-logs' RubyGems package at version 0.0.7 has been identified as containing malicious code. This classification comes from the OpenSSF malicious packages database and is tracked under MAL-2024-6848 and GHSA-hr24-72h2-v53j. There is no further technical detail on the nature of the malicious code or its behavior.

References

Community reviews

Loading reviews…

What to do

Affected software

Description

AI analysisMachine-generated, updated 19 Jul 2026, 00:41 UTC

Technical details

References

Community reviews