Skip to main content
VulnerabilityPublished Updated

gitstats_ruby (RubyGems) · Malicious Code

Affects gitstats_rubySource GCVE Database

0
Severity
High

Rated by Threat Radar

Data as of 19 Jul 2026, 00:05 UTC

What to do

Affected software

ProductAffectedFixed in
RubyGemsgitstats_rubypkg:gem/gitstats_rubyOther threatsAffected
  • =1.0.1
Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Users should avoid installing or using version 1.0.1 of 'gitstats_ruby'. If already installed, remove the package and consider auditing systems for any suspicious activity. Monitor the vendor or RubyGems advisories for updates or official remediation.

Description

The RubyGems package 'gitstats_ruby' version 1.0.1 contains malicious code. This package is identified as a malicious package by the OpenSSF project and is flagged in the GitHub Security Advisory database. No CVSS score or detailed technical exploit information is provided.

References

Community reviews

Loading reviews…