VulnerabilityPublished 25 Jun 2024Updated 18 Jul 2026

first-giving_api (RubyGems) · Malicious Code

Affects first-giving_apiSource GCVE Database

Severity

High

Rated by Threat Radar

Data as of 19 Jul 2026, 00:09 UTC

What to do

Affected software

Product	Affected	Fixed in
RubyGemsfirst-giving_api`pkg:gem/first-giving_api`Other threats	Affected =0.0.1	Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Users are advised to avoid using first-giving_api version 0.0.1. Remove any instances of this package from projects and replace it with trusted alternatives. Monitor vendor or repository advisories for updates or removal of the malicious package from RubyGems.

Description

The first-giving_api RubyGem version 0.0.1 contains malicious code as identified by the OpenSSF malicious packages project. This package is flagged as a malicious package in the RubyGems ecosystem. No CVSS score is available for this threat.

Impact

Using the first-giving_api RubyGem version 0.0.1 may introduce malicious code into dependent projects, potentially compromising the security and integrity of applications that include this package. The exact impact depends on the nature of the malicious code, which is not detailed in the provided information.

Summary

The first-giving_api RubyGem version 0.0.1 has been identified as containing malicious code by the OpenSSF malicious packages initiative. This classification is based on analysis from the GitHub Security Advisory (GHSA-7847-3m4j-52rv) and is cataloged under MAL-2024-6896. There is no detailed technical description of the malicious behavior or exploitation methods in the provided data. No known exploits in the wild have been reported.

References

Community reviews

Loading reviews…

What to do

Affected software

Description

AI analysisMachine-generated, updated 19 Jul 2026, 00:09 UTC

Technical details

References

Community reviews