VulnerabilityPublished 1 Sep 2025Updated 18 Jul 2026

windbeam_api (RubyGems) · Malicious Code

Affects windbeam_apiSource GCVE Database

Severity

High

Rated by Threat Radar

Data as of 18 Jul 2026, 21:00 UTC

What to do

Affected software

Product	Affected	Fixed in
RubyGemswindbeam_api	Affected =0.15.0	Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Users should avoid installing or using 'windbeam_api' version 0.15.0. If already installed, remove the package and audit systems for any suspicious activity. Monitor the vendor or RubyGems advisories for any updates or official guidance.

Description

The RubyGems package 'windbeam_api' version 0.15.0 has been identified as malicious. It executes one or more commands associated with malicious behavior, posing a security risk to users who install or run this package. No CVSS score is available for this threat.

Impact

Users who install or use 'windbeam_api' version 0.15.0 may be exposed to malicious code execution, which could compromise system integrity or confidentiality depending on the nature of the executed commands. The exact impact is not detailed in the available data.

Summary

The OpenSSF Package Analysis project flagged 'windbeam_api' version 0.15.0 as a malicious package in the RubyGems ecosystem. The package is considered malicious because it executes commands linked to malicious activity. There is no detailed technical description of the exact commands or payloads involved.

References

github.com/advisories/GHSA-p7g3-973m-f395 (opens in a new tab)

Community reviews

Loading reviews…

What to do

Affected software

Description

AI analysisMachine-generated, updated 18 Jul 2026, 21:00 UTC

Technical details

References

Community reviews