MalwarePublished 7 Jul 2026Updated 24 Sep 2026

zjenc82c4d3 (RubyGems) · Malicious Code

Affects zjenc82c4d3Source GCVE Database

Malicious package : remove zjenc82c4d3 and rotate any secrets on hosts that installed it.

Data as of 26 Oct 2026, 16:07 UTC

Classification

Malicious package

Published to RubyGems · OSV MAL-2026-9584

What to do

Remove zjenc82c4d3 from every project, lockfile and image that pulls it in. Treat any host that installed it as compromised: rotate the credentials, tokens and keys it could read, from a clean machine.

Affected software

Product	Affected	Fixed in
RubyGemszjenc82c4d3`pkg:gem/zjenc82c4d3`Other threats	Affected =0.0.1	Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

Description

--- _-= Per source details. Do not edit below this line.=-_ ## Source: ghsa-malware (db80130fd4547e4abf32166e00a440af6722be970d40e46a20a7548f3e53df65) --- Credit: [OpenSSF](https://github.com/ossf/malicious-packages) ([source](https://github.com/ossf/malicious-packages/blob/9fbb5fba02ba2f02395d3d2d43c31b2c482b7a9d/osv/malicious/rubygems/zjenc82c4d3/MAL-2026-9584.json))

Impact

Use of the malicious zjenc82c4d3 package version 0.0.1 could lead to execution of harmful code within affected environments. The specific impact depends on the malicious payload embedded in the package, but such packages typically risk compromise of system integrity, data confidentiality, or availability. No confirmed exploitation in the wild has been reported to date.

Defensive guidance

Avoid installing or using the zjenc82c4d3 package version 0.0.1. Since this is a malicious package rather than a vulnerability in legitimate software, remediation involves removing any instances of this package from your environment and ensuring that your dependency sources are trusted. Monitor your package sources and use tools that detect malicious packages. Patch status is not applicable as this is a malicious package, not a vulnerability with a fix.

Summary

The zjenc82c4d3 package version 0.0.1 in the RubyGems ecosystem is classified as a malicious package containing harmful code, as documented by the OpenSSF malicious packages repository and tracked under MAL-2026-9584. This classification indicates that the package itself is intentionally harmful rather than a vulnerability in legitimate software. There is no CVSS score or detailed vulnerability description available, and no known active exploitation has been reported.

References

github.com/advisories/GHSA-4p89-jpj6-qcp5 (opens in a new tab)

Community reviews

Loading reviews…

What to do

Affected software

Description

AI analysisMachine-generated, updated 18 Jul 2026, 17:13 UTC

Technical details

References

Community reviews