Skip to main content
VulnerabilityPublished Updated

murmuring-spider (RubyGems) · Malicious Code

Affects murmuring-spiderSource GCVE Database

0
Severity
High

Rated by Threat Radar

Data as of 18 Jul 2026, 23:58 UTC

What to do

Affected software

ProductAffectedFixed in
RubyGemsmurmuring-spiderpkg:gem/murmuring-spiderOther threatsAffected
  • =0.0.2
Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Users should remove this package from their dependencies and verify their environments for any signs of compromise if it was previously used.

Description

The RubyGems package 'murmuring-spider' version 0.0.2 has been identified as containing malicious code. This package is flagged as a malicious package by the OpenSSF project and is listed in the malicious packages database. No specific technical details about the nature of the malicious code or its impact are provided. There is no known exploit in the wild at this time.

References

Community reviews

Loading reviews…