monolith-twirp-features-featuresync (RubyGems) · Malicious Code
Affects monolith-twirp-features-featuresyncSource GCVE Database
Rated by Threat Radar
Data as of 18 Jul 2026, 23:54 UTC
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| RubyGemsmonolith-twirp-features-featuresync | Affected
| Fixed in– |
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
Users should avoid using version 1.0.0 of 'monolith-twirp-features-featuresync'. Consider removing this package from projects and replacing it with trusted alternatives. Monitor official advisories for updates or remediation instructions.
Description
The RubyGems package 'monolith-twirp-features-featuresync' version 1.0.0 has been identified as malicious by the OpenSSF Package Analysis project. This package executes one or more commands associated with malicious behavior, making it a security threat if used. There is no CVSS score available for this threat. No official patch or remediation guidance is provided. No known exploits in the wild have been reported.