Skip to main content
VulnerabilityPublished Updated

github_chatops_extensions (RubyGems) · Malicious Code

Affects github_chatops_extensionsSource GCVE Database

0
Severity
High

Rated by Threat Radar

Data as of 18 Jul 2026, 23:56 UTC

What to do

Affected software

ProductAffectedFixed in
RubyGemsgithub_chatops_extensionsAffected
  • =0.5.2.96.g33cefed
Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Until then, avoid using the affected version (=0.5.2.96.g33cefed) of the 'github_chatops_extensions' package. Consider removing or replacing this package in your environment to prevent potential malicious activity.

Description

The RubyGems package 'github_chatops_extensions' version 0.5.2.96.g33cefed has been identified as malicious by the OpenSSF Package Analysis project. The package is considered malicious because it executes one or more commands associated with malicious behavior. There is no CVSS score or detailed technical exploit information available. No patch or remediation guidance is currently provided.

References

Community reviews

Loading reviews…