Skip to main content
VulnerabilityPublished Updated

hockeystick (RubyGems) · Malicious Code

Affects hockeystickSource GCVE Database

0
Severity
High

Rated by Threat Radar

Data as of 18 Jul 2026, 23:57 UTC

What to do

Affected software

ProductAffectedFixed in
RubyGemshockeystickpkg:gem/hockeystickOther threatsAffected
  • =5.0.0
Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Avoid using the 'hockeystick' RubyGems package version 5.0.0. Use trusted and verified packages from official sources. Monitor vendor or security advisories for any updates.

Description

The RubyGems package 'hockeystick' version 5.0.0 contains malicious code as identified by the OpenSSF malicious packages project. This is a case of a malicious package rather than a traditional vulnerability. No CVSS score or detailed technical exploit information is provided.

References

Community reviews

Loading reviews…