johnny_five (RubyGems) · Malicious Code
Affects johnny_fiveSource GCVE Database
Rated by Threat Radar
Data as of 19 Jul 2026, 00:10 UTC
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
RubyGemsjohnny_fivepkg:gem/johnny_fiveOther threats | Affected
| Fixed in– |
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
Users should avoid using the affected versions of the johnny_five package. Monitor official RubyGems advisories or the OpenSSF database for updates or remediation guidance.
Description
The johnny_five RubyGem package contains malicious code in multiple specific versions. This issue was identified by the OpenSSF and reported as a malicious package. There is no CVSS score or detailed technical exploit information available. No known exploits in the wild have been reported. The affected versions are explicitly listed and include a range of releases from 0.8.0 through 9.1.1. No patch or remediation information is provided.