MalwarePublished 25 Jun 2024Updated 18 Jul 2026

execute-with_rescue_with_airbrake (RubyGems) · Malicious Code

Affects execute-with_rescue_with_airbrakeSource GCVE Database

Malicious package : remove execute-with_rescue_with_airbrake and rotate any secrets on hosts that installed it.

Data as of 19 Jul 2026, 00:37 UTC

Classification

Malicious package

Published to RubyGems · OSV MAL-2024-6893

What to do

Remove execute-with_rescue_with_airbrake from every project, lockfile and image that pulls it in. Treat any host that installed it as compromised: rotate the credentials, tokens and keys it could read, from a clean machine.

Affected software

Product	Affected	Fixed in
RubyGemsexecute-with_rescue_with_airbrake`pkg:gem/execute-with_rescue_with_airbrake`Other threats	Affected =0.0.3	Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

Description

The RubyGem package 'execute-with_rescue_with_airbrake' version 0.0.3 contains malicious code. This package is identified as a malicious package by the OpenSSF project and has been cataloged in the GCVE database. There is no CVSS score or detailed technical exploit information available. No official patch or remediation guidance has been provided.

Impact

Use of this malicious RubyGem package could lead to execution of unauthorized or harmful code within applications that include it as a dependency. The exact impact is not detailed, but inclusion of malicious code in a package can compromise application integrity, confidentiality, and availability depending on the payload and context.

Defensive guidance

Users should avoid using the affected version (=0.0.3) of the 'execute-with_rescue_with_airbrake' package. It is recommended to remove this package from projects and dependencies and to verify the integrity and provenance of RubyGems before inclusion. Monitor vendor or repository advisories for updates or official remediation.

Summary

The 'execute-with_rescue_with_airbrake' RubyGem version 0.0.3 is flagged as containing malicious code according to the OpenSSF malicious packages repository and the GCVE database. The package is identified under the alias GHSA-w464-grpr-6p26 and is classified as a malicious package rather than a traditional vulnerability. There is no detailed technical description of the malicious behavior or exploitation vectors in the provided data.

References

Community reviews

Loading reviews…

What to do

Affected software

Description

AI analysisMachine-generated, updated 19 Jul 2026, 00:37 UTC

Technical details

References

Community reviews