VulnerabilityPublished 1 Sep 2025Updated 18 Jul 2026

github-proto-repositories (RubyGems) · Malicious Code

Affects github-proto-repositoriesSource GCVE Database

Severity

High

Rated by Threat Radar

Data as of 18 Jul 2026, 23:56 UTC

What to do

Affected software

Product	Affected	Fixed in
RubyGemsgithub-proto-repositories	Affected =1.2.11.re9f78aa	Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Until a fixed version or removal guidance is available, avoid using this package version and remove it from any environments where it is present.

Description

The RubyGems package 'github-proto-repositories' version 1.2.11.re9f78aa has been identified as malicious by the OpenSSF Package Analysis project. This package executes one or more commands associated with malicious behavior. There is no CVSS score or detailed technical exploit information available. No patch or remediation guidance is provided in the source data.

Impact

Use of this specific package version may lead to execution of malicious commands, potentially compromising systems or data depending on the nature of those commands. The exact impact is not detailed in the source information. No known exploits in the wild are reported.

Summary

The 'github-proto-repositories' RubyGems package at version 1.2.11.re9f78aa is flagged as malicious due to executing commands linked to malicious activity. This identification comes from the OpenSSF Package Analysis project and is catalogued under MAL-2025-46911. No further technical details or exploitation methods are described in the available data. The package is considered a supply chain threat due to its malicious code execution behavior.

References

github.com/advisories/GHSA-g746-2wmq-w25w (opens in a new tab)

Community reviews

Loading reviews…

What to do

Affected software

Description

AI analysisMachine-generated, updated 18 Jul 2026, 23:56 UTC

Technical details

References

Community reviews