MalwarePublished 7 Jul 2026Updated 24 Sep 2026

slnfive8155 (RubyGems) · Malicious Code

Affects slnfive8155Source GCVE Database

Malicious package : remove slnfive8155 and rotate any secrets on hosts that installed it.

Data as of 26 Oct 2026, 16:07 UTC

Classification

Malicious package

Published to RubyGems · OSV MAL-2026-8682

What to do

Remove slnfive8155 from every project, lockfile and image that pulls it in. Treat any host that installed it as compromised: rotate the credentials, tokens and keys it could read, from a clean machine.

Affected software

Product	Affected	Fixed in
RubyGemsslnfive8155`pkg:gem/slnfive8155`Other threats	Affected =0.0.1	Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

Description

The RubyGem package slnfive8155 version 0.0.1 has been identified as containing malicious code. This package is classified as a malicious package rather than a traditional vulnerability. There is no CVSS score or detailed technical exploit information available. No known exploits in the wild have been reported. No patch or remediation guidance is provided for this package.

Impact

Using the slnfive8155 RubyGem version 0.0.1 may introduce malicious code into the software supply chain, potentially leading to unauthorized actions or compromise of systems that incorporate this package. However, no specific exploitation or impact details are documented, and no known active exploits have been reported.

Defensive guidance

Avoid using the slnfive8155 RubyGem version 0.0.1 as it is identified as malicious. Use trusted and verified packages from official sources. Monitor for updates from RubyGems or security advisories regarding this package.

Summary

The RubyGems package slnfive8155 at version 0.0.1 is flagged as malicious code by the OpenSSF malicious packages database. This is a supply chain threat involving a package that contains harmful or unauthorized code. The package is not a vulnerability in the traditional sense but poses a risk if used due to its malicious nature. There is no vendor advisory or patch available, and no exploitation details are provided.

References

github.com/advisories/GHSA-4v6g-3rxq-qw8m (opens in a new tab)

Community reviews

Loading reviews…

What to do

Affected software

Description

AI analysisMachine-generated, updated 18 Jul 2026, 21:55 UTC

Technical details

References

Community reviews