github-kredz (RubyGems) · Malicious Code
Affects github-kredzSource GCVE Database
Rated by Threat Radar
Data as of 18 Jul 2026, 23:57 UTC
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| RubyGemsgithub-kredz | Affected
| Fixed in– |
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
Users should avoid using the affected version of 'github-kredz' and remove it if already installed. Monitor official advisories for updates or fixes.
Description
The RubyGems package 'github-kredz' version 1.0.1.1135.gf4a4623f5 has been identified as malicious by the OpenSSF Package Analysis project. This package executes one or more commands associated with malicious behavior. There is no information about available patches or fixes. No known exploits in the wild have been reported. The threat affects only the specified version of the package.