melio-platform-api-client (RubyGems) · Malicious Code
Affects melio-platform-api-clientSource GCVE Database
Rated by Threat Radar
Data as of 18 Jul 2026, 23:58 UTC
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| RubyGemsmelio-platform-api-client | Affected
| Fixed in– |
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
Users should immediately discontinue use of the affected versions of the 'melio-platform-api-client' package and remove them from their environments. Monitor vendor or OpenSSF advisories for updates or official remediation. Avoid installing or using these versions until a clean, verified version is available.
Description
The 'melio-platform-api-client' RubyGems package versions 3.0.1, 3.1.1, 3.1.2, 3.1.4, 4.4.4, 4.4.5, 4.4.6, 5.0.0, and 5.0.1 have been identified as malicious. The package is considered malicious because it communicates with a domain associated with malicious activity. No official patch or remediation guidance is provided in the available data.