telegram_bot-ruby (RubyGems) · Malicious Code
Affects telegram_bot-rubySource GCVE Database
Rated by Threat Radar
Data as of 18 Jul 2026, 22:34 UTC
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
RubyGemstelegram_bot-rubypkg:gem/telegram_bot-rubyOther threats | Affected
| Fixed in– |
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
Users should avoid using version 0.12.0 of 'telegram_bot-ruby' and instead obtain the package from trusted sources or verified clean versions. Monitor vendor or repository advisories for updates or removal of the malicious version.
Description
The RubyGems package 'telegram_bot-ruby' version 0.12.0 contains malicious code as identified by the OpenSSF malicious packages project. This is a supply chain threat where the package itself is compromised to potentially perform unauthorized or harmful actions when used. No CVSS score or detailed technical exploit information is provided.