driftwood-client (RubyGems) · Malicious Code
Affects driftwood-clientSource GCVE Database
Rated by Threat Radar
Data as of 19 Jul 2026, 00:33 UTC
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| RubyGemsdriftwood-client | Affected
| Fixed in– |
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
Users should avoid installing or using the 'driftwood-client' package at version 0.0.1.r1319997b9. Review and remove this package if already present in your environment. Monitor vendor advisories or trusted security sources for updates regarding remediation.
Description
The RubyGems package 'driftwood-client' version 0.0.1.r1319997b9 is identified as malicious. It contains code that executes commands associated with malicious behavior. This package is flagged by the OpenSSF Package Analysis project as a security threat due to its harmful actions.