VulnerabilityPublished 1 Sep 2025Updated 18 Jul 2026

monolith-twirp-trusttiers-trusttier (RubyGems) · Malicious Code

Affects monolith-twirp-trusttiers-trusttierSource GCVE Database

Severity

High

Rated by Threat Radar

Data as of 18 Jul 2026, 23:56 UTC

What to do

Affected software

Product	Affected	Fixed in
RubyGemsmonolith-twirp-trusttiers-trusttier	Affected =1.0.3	Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Users should avoid installing or using version 1.0.3 of 'monolith-twirp-trusttiers-trusttier'. If already installed, remove the package immediately and verify system integrity. Monitor official advisories for any updates or fixes.

Description

The RubyGems package 'monolith-twirp-trusttiers-trusttier' version 1.0.3 has been identified as malicious by the OpenSSF Package Analysis project. This package executes one or more commands associated with malicious behavior, posing a security risk to users who install or use it.

Impact

Users who install or depend on version 1.0.3 of this package may be exposed to malicious code execution, which could lead to compromise of the host environment or unauthorized actions performed by the malicious commands embedded in the package.

Summary

The package 'monolith-twirp-trusttiers-trusttier' at version 1.0.3 is classified as malicious due to its execution of commands linked to malicious activity. This determination was made by the OpenSSF Package Analysis project and is documented in the associated advisory MAL-2025-46918. No further technical details on the nature of the commands or exploitation methods are provided.

References

github.com/advisories/GHSA-x9jh-3mj8-vp8p (opens in a new tab)

Community reviews

Loading reviews…

What to do

Affected software

Description

AI analysisMachine-generated, updated 18 Jul 2026, 23:56 UTC

Technical details

References

Community reviews