monolith-twirp-snippy-snippy (RubyGems) · Malicious Code
Affects monolith-twirp-snippy-snippySource GCVE Database
Rated by Threat Radar
Data as of 18 Jul 2026, 23:56 UTC
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| RubyGemsmonolith-twirp-snippy-snippy | Affected
| Fixed in– |
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
Users should avoid installing or using version 1.0.4 of the 'monolith-twirp-snippy-snippy' package. Consider removing this package if already installed and monitor official sources for updates or advisories regarding remediation.
Description
The RubyGems package 'monolith-twirp-snippy-snippy' version 1.0.4 has been identified as malicious. It executes one or more commands associated with malicious behavior, posing a security risk to users who install or use this package. There is no CVSS score available for this threat, and no official patch or remediation guidance has been provided.