sqlcommenter_rails (RubyGems) · Malicious Code
Affects sqlcommenter_railsSource GCVE Database
Rated by Threat Radar
Data as of 18 Jul 2026, 22:30 UTC
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
RubyGemssqlcommenter_railspkg:gem/sqlcommenter_railsOther threats | Affected
| Fixed in– |
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
Users should avoid using the affected versions (=0.1.0 and =99.0.1) of sqlcommenter_rails. It is recommended to verify package integrity and source before installation and to use trusted versions or alternatives. Monitor vendor or ecosystem advisories for updates.
Description
The sqlcommenter_rails RubyGem versions 0.1.0 and 99.0.1 have been identified as containing malicious code. This is a supply chain threat involving a malicious package published to the RubyGems ecosystem. No CVSS score or detailed technical exploitation information is provided.