dependency_confusion123 (RubyGems) · Malicious Code
Affects dependency_confusion123Source GCVE Database
Rated by Threat Radar
Data as of 18 Jul 2026, 19:25 UTC
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| RubyGemsdependency_confusion123 | Affected
| Fixed in– |
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
Users should avoid using the 'dependency_confusion123' package version 9.9.9. Review and remove this package from projects if present. Monitor vendor advisories or the OpenSSF repository for updates or remediation guidance.
Description
--- _-= Per source details. Do not edit below this line.=-_ ## Source: ghsa-malware (d0f9b3e4d459a433398285978332fca6cdc52d8e50cc579b9acccc0a2ac6d279) ## Source: ossf-package-analysis (d4d13afb7306711deba7679787e9c867a3285ab9deabbf0d1efcf452427cd004) The OpenSSF Package Analysis project identified 'dependency_confusion123' @ 9.9.9 (rubygems) as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity. --- Credit: [OpenSSF](https://github.com/ossf/malicious-packages) ([source](https://github.com/ossf/malicious-packages/blob/9fbb5fba02ba2f02395d3d2d43c31b2c482b7a9d/osv/malicious/rubygems/dependency_confusion123/MAL-2024-1341.json)) ## Source: ossf-package-analysis (d4d13afb7306711deba7679787e9c867a3285ab9deabbf0d1efcf452427cd004) The OpenSSF Package Analysis project identified 'dependency_confusion123' @ 9.9.9 (rubygems) as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity.