ellen_weather (RubyGems) · Malicious Code
Affects ellen_weatherSource GCVE Database
Rated by Threat Radar
Data as of 19 Jul 2026, 00:37 UTC
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
RubyGemsellen_weatherpkg:gem/ellen_weatherOther threats | Affected
| Fixed in– |
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
Users should avoid using 'ellen_weather' version 0.0.1. Consider removing or replacing this package with a trusted alternative. Monitor vendor or repository advisories for updates or official guidance.
Description
The RubyGems package 'ellen_weather' version 0.0.1 contains malicious code as identified by the OpenSSF malicious packages database. This package is flagged as a malicious package but no specific technical details or exploit methods are provided. There is no CVSS score or detailed impact analysis available. No patch or remediation guidance is provided for this version.