Skip to main content
VulnerabilityPublished Updated

github_release-stats (RubyGems) · Malicious Code

Affects github_release-statsSource GCVE Database

0
Severity
High

Rated by Threat Radar

Data as of 19 Jul 2026, 00:05 UTC

What to do

Affected software

ProductAffectedFixed in
RubyGemsgithub_release-statspkg:gem/github_release-statsOther threatsAffected
  • =0.0.2
Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Users should avoid using github_release-stats version 0.0.2 and remove it from their projects if present. Monitor official advisories for updates or replacement packages. Since this is not a cloud service, remediation depends on user action.

Description

The RubyGems package github_release-stats version 0.0.2 has been identified as containing malicious code. This package is flagged as a malicious package by the OpenSSF and related sources. No CVSS score or detailed technical exploit information is provided. There is no indication of known exploits in the wild or an available patch.

References

Community reviews

Loading reviews…