VulnerabilityPublished 25 Jun 2024Updated 18 Jul 2026

spider_gazelle (RubyGems) · Malicious Code

Affects spider_gazelleSource GCVE Database

Severity

High

Rated by Threat Radar

Data as of 18 Jul 2026, 22:35 UTC

What to do

Affected software

Product	Affected	Fixed in
RubyGemsspider_gazelle`pkg:gem/spider_gazelle`Other threats	Affected =3.2.0	Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Users should avoid installing or using 'spider_gazelle' version 3.2.0. If already installed, consider removing the package and replacing it with a trusted alternative. Monitor official advisories for updates or fixes.

Description

The RubyGems package 'spider_gazelle' version 3.2.0 contains malicious code. This package is identified as a malicious package by the OpenSSF and is listed in the malicious-packages database. No official patch or remediation information is provided.

Impact

Use of the 'spider_gazelle' version 3.2.0 package may lead to execution of malicious code within environments that install or run this package. The exact impact depends on the malicious payload embedded in the package, which is not detailed in the provided data.

Summary

The 'spider_gazelle' RubyGems package at version 3.2.0 is flagged as containing malicious code according to the OpenSSF malicious packages database (MAL-2024-7028). This is a supply chain threat where the package itself is compromised or intentionally malicious. There is no CVSS score or detailed technical vulnerability description available.

References

Community reviews

Loading reviews…

What to do

Affected software

Description

AI analysisMachine-generated, updated 18 Jul 2026, 22:35 UTC

Technical details

References

Community reviews