Skip to main content
MalwarePublished Updated

swaim6a (RubyGems) · Malicious Code

Affects swaim6aSource GCVE Database

0

Malicious package : remove swaim6a and rotate any secrets on hosts that installed it.

Data as of 26 Oct 2026, 16:07 UTC

Classification

Malicious package

Published to RubyGems · OSV MAL-2026-8914

What to do

Remove swaim6a from every project, lockfile and image that pulls it in. Treat any host that installed it as compromised: rotate the credentials, tokens and keys it could read, from a clean machine.

Affected software

ProductAffectedFixed in
RubyGemsswaim6apkg:gem/swaim6aOther threatsAffected
  • =0.0.1
Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

Description

The RubyGems package 'swaim6a' version 0.0.1 has been identified as containing malicious code. This is a case of a malicious package rather than a traditional software vulnerability. No CVSS score is available for this threat.

References

Community reviews

Loading reviews…