evil_gem (RubyGems) · Malicious Code
Affects evil_gemSource GCVE Database
Rated by Threat Radar
Data as of 19 Jul 2026, 00:35 UTC
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| RubyGemsevil_gem | Affected
| Fixed in– |
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
Avoid using the 'evil_gem' package version 0.1.0. Since this is a malicious package rather than a vulnerability in legitimate software, the recommended mitigation is to remove or not install this package. Users should verify dependencies and ensure that 'evil_gem' is not included in their software supply chain.
Description
The RubyGems package 'evil_gem' version 0.1.0 has been identified as malicious. It communicates with domains linked to malicious activity and executes commands associated with harmful behavior. This package poses a security risk if included in a project.