prometheus_gcstat (RubyGems) · Malicious Code
Affects prometheus_gcstatSource GCVE Database
Rated by Threat Radar
Data as of 18 Jul 2026, 22:33 UTC
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
RubyGemsprometheus_gcstatpkg:gem/prometheus_gcstatOther threats | Affected
| Fixed in– |
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
Users should avoid installing or using the affected versions of prometheus_gcstat. It is recommended to remove these versions if present and obtain the package only from trusted sources. Monitor vendor or repository advisories for updates or official remediation.
Description
The prometheus_gcstat RubyGem versions 0.0.900, 0.1.900, 0.900.0, 1.900, and 9002.0 contain malicious code. This is identified as a malicious package rather than a traditional vulnerability. No patch or remediation information is provided. There are no known exploits in the wild as of the published date.