VulnerabilityPublished 25 Jun 2024Updated 18 Jul 2026

rbi-central (RubyGems) · Malicious Code

Affects rbi-centralSource GCVE Database

Severity

High

Rated by Threat Radar

Data as of 18 Jul 2026, 22:37 UTC

What to do

Affected software

Product	Affected	Fixed in
RubyGemsrbi-central`pkg:gem/rbi-central`Other threats	Affected =0.0.2	Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Remove or replace this package with a trusted alternative. Monitor official RubyGems advisories or the OpenSSF malicious package database for updates or fixes.

Description

The RubyGems package 'rbi-central' version 0.0.2 contains malicious code as identified by the OpenSSF malicious packages database. This is a supply chain threat involving a malicious package published to the RubyGems ecosystem. No CVSS score or detailed technical exploitation information is provided.

Impact

Use of the affected version (=0.0.2) of the 'rbi-central' package may lead to execution of malicious code within the environment where it is installed. This poses a risk to the integrity and security of systems depending on this package. No further impact details are provided.

Summary

The 'rbi-central' RubyGems package at version 0.0.2 has been identified as containing malicious code. This classification comes from the OpenSSF malicious packages repository and is tracked under MAL-2024-7010 and GHSA-6wr8-q54r-mxx9. There is no detailed vulnerability or exploit description beyond the presence of malicious code.

References

github.com/advisories/GHSA-6wr8-q54r-mxx9 (opens in a new tab)

Community reviews

Loading reviews…

What to do

Affected software

Description

AI analysisMachine-generated, updated 18 Jul 2026, 22:37 UTC

Technical details

References

Community reviews