Skip to main content
VulnerabilityPublished Updated

font_awesome-sassc (RubyGems) · Malicious Code

Affects font_awesome-sasscSource GCVE Database

0
Severity
High

Rated by Threat Radar

Data as of 19 Jul 2026, 00:07 UTC

What to do

Affected software

ProductAffectedFixed in
RubyGemsfont_awesome-sasscpkg:gem/font_awesome-sasscOther threatsAffected
  • =4.7.1
Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Users should avoid using version 4.7.1 of 'font_awesome-sassc' and remove or replace it with a trusted, verified version or alternative package. Since this is a malicious package, remediation involves removing the compromised package from projects and dependency trees. Monitor vendor or repository advisories for updates or safe versions.

Description

The RubyGems package 'font_awesome-sassc' version 4.7.1 contains malicious code. This is a supply chain threat where the package itself is compromised to include harmful functionality. No CVSS score is available for this issue.

References

Community reviews

Loading reviews…