omniauth_mixer (RubyGems) · Malicious Code
Affects omniauth_mixerSource GCVE Database
Rated by Threat Radar
Data as of 18 Jul 2026, 22:38 UTC
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
RubyGemsomniauth_mixerpkg:gem/omniauth_mixerOther threats | Affected
| Fixed in– |
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
Users should avoid using omniauth_mixer version 0.1.2 and remove it from their environments if present. Consider replacing it with a trusted alternative. Monitor vendor or ecosystem advisories for updates or official guidance.
Description
The omniauth_mixer RubyGem version 0.1.2 contains malicious code as identified by the OpenSSF malicious packages project. This package is flagged as a malicious package rather than a traditional vulnerability. No official patch or remediation guidance is provided. There are no known exploits in the wild at this time.