em_statsd (RubyGems) · Malicious Code
Affects em_statsdSource GCVE Database
Rated by Threat Radar
Data as of 19 Jul 2026, 00:37 UTC
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
RubyGemsem_statsdpkg:gem/em_statsdOther threats | Affected
| Fixed in– |
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
Since this is a malicious package, the primary mitigation is to avoid installing or using em_statsd version 1.0.0. Users should remove this package if present and verify dependencies to prevent supply chain compromise. Monitor vendor advisories or RubyGems for updates or removal of the malicious package.
Description
The em_statsd RubyGem version 1.0.0 contains malicious code as identified by the OpenSSF malicious packages project. This package is flagged as a malicious package rather than a traditional vulnerability. No CVSS score or detailed technical exploit information is provided.