diff-analysis (RubyGems) · Malicious Code
Affects diff-analysisSource GCVE Database
0
Severity
HighRated by Threat Radar
Data as of 19 Jul 2026, 00:33 UTC
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| RubyGemsdiff-analysis | Affected
| Fixed in– |
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
Users should avoid using the affected version (=0.1.0.r8ff4356) of the 'diff-analysis' package. Consider removing or replacing this package if it is present in your environment.
Description
The RubyGems package 'diff-analysis' version 0.1.0.r8ff4356 has been identified as malicious. It executes one or more commands associated with malicious behavior. This package is flagged by the OpenSSF Package Analysis project as a security threat due to its malicious code execution.
References
Community reviews
Loading reviews…