endosome (RubyGems) · Malicious Code
Affects endosomeSource GCVE Database
Rated by Threat Radar
Data as of 19 Jul 2026, 00:37 UTC
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
RubyGemsendosomepkg:gem/endosomeOther threats | Affected
| Fixed in– |
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
Avoid using the 'endosome' RubyGem version 22.55.0. Since this is a malicious package rather than a patchable vulnerability, remediation involves removing or not installing this version. Check RubyGems and trusted sources for a clean or updated version. Monitor official advisories for any updates or remediation guidance.
Description
The RubyGem package 'endosome' version 22.55.0 has been identified as containing malicious code. This is a supply chain threat where the package itself is malicious rather than a traditional software vulnerability. No CVSS score or detailed technical exploit information is provided.