wurl-aws-s3 (RubyGems) · Malicious Code
Affects wurl-aws-s3Source GCVE Database
0
Severity
HighRated by Threat Radar
Data as of 18 Jul 2026, 21:00 UTC
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
RubyGemswurl-aws-s3pkg:gem/wurl-aws-s3Other threats | Affected
| Fixed in– |
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
Remove or replace this package with a trusted alternative. Monitor vendor or repository advisories for updates or official fixes. Exercise caution when incorporating third-party packages and verify their integrity before use.
Description
The RubyGems package 'wurl-aws-s3' version 0.3.1 contains malicious code as identified by the OpenSSF malicious packages database. This is a supply chain threat where the package itself is intentionally harmful. No CVSS score or detailed technical exploit information is provided.
References
Community reviews
Loading reviews…