monolith-twirp-notifications-notifyd (RubyGems) · Malicious Code
Affects monolith-twirp-notifications-notifydSource GCVE Database
Rated by Threat Radar
Data as of 18 Jul 2026, 23:56 UTC
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| RubyGemsmonolith-twirp-notifications-notifyd | Affected
| Fixed in– |
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
Users should avoid using version 1.2.8 of 'monolith-twirp-notifications-notifyd'. Consider removing or replacing this package with a trusted alternative. Monitor vendor or repository advisories for updates or official guidance.
Description
The RubyGems package 'monolith-twirp-notifications-notifyd' version 1.2.8 has been identified as malicious. It executes one or more commands associated with malicious behavior. This package is flagged by the OpenSSF Package Analysis project as a threat. No official patch or remediation guidance is provided. There is no evidence of known exploits in the wild at this time.