mandrill-api-ruby (RubyGems) · Malicious Code
Affects mandrill-api-rubySource GCVE Database
Rated by Threat Radar
Data as of 19 Jul 2026, 00:10 UTC
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| RubyGemsmandrill-api-ruby | Affected
| Fixed in– |
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
Consider removing or replacing this package with a trusted alternative. Monitor vendor or repository advisories for updates or official remediation.
Description
The RubyGems package 'mandrill-api-ruby' version 6.0.1 has been identified as malicious by the OpenSSF Package Analysis project. The package is considered malicious because it communicates with a domain associated with malicious activity. There is no CVSS score or detailed technical exploit information available. No official patch or remediation guidance is provided in the source data.