MalwarePublished 7 Jul 2026Updated 24 Sep 2026

wwday3001txtxyz (RubyGems) · Malicious Code

Affects wwday3001txtxyzSource GCVE Database

Malicious package : remove wwday3001txtxyz and rotate any secrets on hosts that installed it.

Data as of 26 Oct 2026, 16:07 UTC

Classification

Malicious package

Published to RubyGems · OSV MAL-2026-9505

What to do

Remove wwday3001txtxyz from every project, lockfile and image that pulls it in. Treat any host that installed it as compromised: rotate the credentials, tokens and keys it could read, from a clean machine.

Affected software

Product	Affected	Fixed in
RubyGemswwday3001txtxyz`pkg:gem/wwday3001txtxyz`Other threats	Affected =0.0.1	Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

Description

--- _-= Per source details. Do not edit below this line.=-_ ## Source: ghsa-malware (7904ce388bd3992afaced174ff4e7cd6aa170e4e9982927bcd20ed3ca895f16b) --- Credit: [OpenSSF](https://github.com/ossf/malicious-packages) ([source](https://github.com/ossf/malicious-packages/blob/9fbb5fba02ba2f02395d3d2d43c31b2c482b7a9d/osv/malicious/rubygems/wwday3001txtxyz/MAL-2026-9505.json))

Impact

The presence of malicious code in the package could lead to compromise of systems that install and run this package. However, specific impacts or exploitation scenarios are not detailed in the available data. There are no known active exploits reported.

Defensive guidance

Since this package is identified as malicious, the recommended mitigation is to avoid installing or using version 0.0.1 of 'wwday3001txtxyz'. Users should remove this package if already installed and consider using trusted alternatives. Monitor official advisories for any updates.

Summary

The RubyGems package 'wwday3001txtxyz' version 0.0.1 is recognized as a malicious package according to the OpenSSF malicious packages repository and GHSA malware advisories. There is no detailed information on the type of malicious code or exploitation methods. No CVSS score or severity rating is provided, and no known exploits in the wild have been reported.

References

github.com/advisories/GHSA-jhg6-8p6v-qggq (opens in a new tab)

Community reviews

Loading reviews…

What to do

Affected software

Description

AI analysisMachine-generated, updated 18 Jul 2026, 17:21 UTC

Technical details

References

Community reviews