Security feed

Back to latest events

24 October 2026

advisoryUnratedOSV24 Oct 2026

Malicious code in hgrangex9 (RubyGems)

--- _-= Per source details. Do not edit below this line.=-_

Announced 7 Jul 2026

hgrangex9

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:MAL-2026-7753

hgrangex9

Source reference: /affected/0/package/name

Affected versions: 0.0.1
Source reference: /affected/0/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Publisher severity

No explicit severity was provided.

Event: #6509 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 22:28:23 GMT
Publisher date: Tue, 07 Jul 2026 11:53:40 GMT

Read the original announcement

advisoryUnratedOSV24 Oct 2026

Malicious code in lf295s1 (RubyGems)

--- _-= Per source details. Do not edit below this line.=-_

Announced 7 Jul 2026

lf295s1

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:MAL-2026-8017

lf295s1

Source reference: /affected/0/package/name

Affected versions: 0.0.345044
Source reference: /affected/0/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Publisher severity

No explicit severity was provided.

Event: #6508 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 22:28:23 GMT
Publisher date: Tue, 07 Jul 2026 11:56:17 GMT

Read the original announcement

advisoryUnratedOSV24 Oct 2026

Malicious code in lf295s0 (RubyGems)

--- _-= Per source details. Do not edit below this line.=-_

Announced 7 Jul 2026

lf295s0

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:MAL-2026-8016

lf295s0

Source reference: /affected/0/package/name

Affected versions: 0.0.107824
Source reference: /affected/0/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Publisher severity

No explicit severity was provided.

Event: #6507 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 22:28:22 GMT
Publisher date: Tue, 07 Jul 2026 11:56:16 GMT

Read the original announcement

advisoryUnratedOSV24 Oct 2026

Malicious code in lf295q4 (RubyGems)

--- _-= Per source details. Do not edit below this line.=-_

Announced 7 Jul 2026

lf295q4

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:MAL-2026-8007

lf295q4

Source reference: /affected/0/package/name

Affected versions: 0.0.399610
Source reference: /affected/0/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Publisher severity

No explicit severity was provided.

Event: #6506 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 22:28:22 GMT
Publisher date: Tue, 07 Jul 2026 11:56:09 GMT

Read the original announcement

advisoryUnratedOSV24 Oct 2026

Malicious code in lf295q12 (RubyGems)

--- _-= Per source details. Do not edit below this line.=-_

Announced 7 Jul 2026

lf295q12

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:MAL-2026-8001

lf295q12

Source reference: /affected/0/package/name

Affected versions: 0.0.535352
Source reference: /affected/0/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Publisher severity

No explicit severity was provided.

Event: #6505 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 22:28:22 GMT
Publisher date: Tue, 07 Jul 2026 11:56:05 GMT

Read the original announcement

advisoryUnratedOSV24 Oct 2026

Malicious code in lf295r2 (RubyGems)

--- _-= Per source details. Do not edit below this line.=-_

Announced 7 Jul 2026

lf295r2

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:MAL-2026-8015

lf295r2

Source reference: /affected/0/package/name

Affected versions: 0.0.905642
Source reference: /affected/0/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Publisher severity

No explicit severity was provided.

Event: #6504 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 22:28:21 GMT
Publisher date: Tue, 07 Jul 2026 11:56:15 GMT

Read the original announcement

advisoryUnratedOSV24 Oct 2026

Malicious code in lf295r1 (RubyGems)

--- _-= Per source details. Do not edit below this line.=-_

Announced 7 Jul 2026

lf295r1

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:MAL-2026-8014

lf295r1

Source reference: /affected/0/package/name

Affected versions: 0.0.845828
Source reference: /affected/0/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Publisher severity

No explicit severity was provided.

Event: #6503 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 22:28:21 GMT
Publisher date: Tue, 07 Jul 2026 11:56:14 GMT

Read the original announcement

advisoryUnratedOSV24 Oct 2026

Malicious code in lf295q11 (RubyGems)

--- _-= Per source details. Do not edit below this line.=-_

Announced 7 Jul 2026

lf295q11

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:MAL-2026-8000

lf295q11

Source reference: /affected/0/package/name

Affected versions: 0.0.826811
Source reference: /affected/0/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Publisher severity

No explicit severity was provided.

Event: #6502 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 22:28:20 GMT
Publisher date: Tue, 07 Jul 2026 11:56:05 GMT

Read the original announcement

advisoryUnratedOSV24 Oct 2026

Malicious code in lf295q14 (RubyGems)

--- _-= Per source details. Do not edit below this line.=-_

Announced 7 Jul 2026

lf295q14

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:MAL-2026-8003

lf295q14

Source reference: /affected/0/package/name

Affected versions: 0.0.131583
Source reference: /affected/0/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Publisher severity

No explicit severity was provided.

Event: #6501 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 22:28:20 GMT
Publisher date: Tue, 07 Jul 2026 11:56:07 GMT

Read the original announcement

advisoryUnratedOSV24 Oct 2026

Malicious code in lf295q7 (RubyGems)

--- _-= Per source details. Do not edit below this line.=-_

Announced 7 Jul 2026

lf295q7

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:MAL-2026-8010

lf295q7

Source reference: /affected/0/package/name

Affected versions: 0.0.688115
Source reference: /affected/0/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Publisher severity

No explicit severity was provided.

Event: #6500 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 22:28:20 GMT
Publisher date: Tue, 07 Jul 2026 11:56:12 GMT

Read the original announcement

advisoryUnratedOSV24 Oct 2026

Malicious code in lf295q13 (RubyGems)

--- _-= Per source details. Do not edit below this line.=-_

Announced 7 Jul 2026

lf295q13

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:MAL-2026-8002

lf295q13

Source reference: /affected/0/package/name

Affected versions: 0.0.916436
Source reference: /affected/0/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Publisher severity

No explicit severity was provided.

Event: #6499 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 22:28:19 GMT
Publisher date: Tue, 07 Jul 2026 11:56:06 GMT

Read the original announcement

advisoryUnratedOSV24 Oct 2026

Malicious code in lf295q10 (RubyGems)

--- _-= Per source details. Do not edit below this line.=-_

Announced 7 Jul 2026

lf295q10

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:MAL-2026-7999

lf295q10

Source reference: /affected/0/package/name

Affected versions: 0.0.883567
Source reference: /affected/0/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Publisher severity

No explicit severity was provided.

Event: #6498 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 22:28:19 GMT
Publisher date: Tue, 07 Jul 2026 11:56:04 GMT

Read the original announcement

advisoryUnratedOSV24 Oct 2026

Malicious code in lf295s4 (RubyGems)

--- _-= Per source details. Do not edit below this line.=-_

Announced 7 Jul 2026

lf295s4

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:MAL-2026-8020

lf295s4

Source reference: /affected/0/package/name

Affected versions: 0.0.306304
Source reference: /affected/0/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Publisher severity

No explicit severity was provided.

Event: #6497 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 22:28:19 GMT
Publisher date: Tue, 07 Jul 2026 11:56:19 GMT

Read the original announcement

advisoryUnratedOSV24 Oct 2026

Malicious code in lf295q3 (RubyGems)

--- _-= Per source details. Do not edit below this line.=-_

Announced 7 Jul 2026

lf295q3

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:MAL-2026-8006

lf295q3

Source reference: /affected/0/package/name

Affected versions: 0.0.628033
Source reference: /affected/0/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Publisher severity

No explicit severity was provided.

Event: #6496 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 22:28:18 GMT
Publisher date: Tue, 07 Jul 2026 11:56:09 GMT

Read the original announcement

advisoryUnratedOSV24 Oct 2026

Malicious code in lf295q6 (RubyGems)

--- _-= Per source details. Do not edit below this line.=-_

Announced 7 Jul 2026

lf295q6

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:MAL-2026-8009

lf295q6

Source reference: /affected/0/package/name

Affected versions: 0.0.786455
Source reference: /affected/0/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Publisher severity

No explicit severity was provided.

Event: #6495 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 22:28:18 GMT
Publisher date: Tue, 07 Jul 2026 11:56:11 GMT

Read the original announcement

advisoryUnratedOSV24 Oct 2026

Malicious code in lf295q8 (RubyGems)

--- _-= Per source details. Do not edit below this line.=-_

Announced 7 Jul 2026

lf295q8

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:MAL-2026-8011

lf295q8

Source reference: /affected/0/package/name

Affected versions: 0.0.670623
Source reference: /affected/0/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Publisher severity

No explicit severity was provided.

Event: #6494 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 22:28:18 GMT
Publisher date: Tue, 07 Jul 2026 11:56:12 GMT

Read the original announcement

advisoryUnratedOSV24 Oct 2026

Malicious code in lf295q15 (RubyGems)

--- _-= Per source details. Do not edit below this line.=-_

Announced 7 Jul 2026

lf295q15

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:MAL-2026-8004

lf295q15

Source reference: /affected/0/package/name

Affected versions: 0.0.389615
Source reference: /affected/0/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Publisher severity

No explicit severity was provided.

Event: #6493 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 22:28:17 GMT
Publisher date: Tue, 07 Jul 2026 11:56:08 GMT

Read the original announcement

advisoryUnratedOSV24 Oct 2026

Malicious code in lambhgproxyoai (RubyGems)

--- _-= Per source details. Do not edit below this line.=-_

Announced 7 Jul 2026

lambhgproxyoai

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:MAL-2026-7808

lambhgproxyoai

Source reference: /affected/0/package/name

Affected versions: 0.0.1
Source reference: /affected/0/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Publisher severity

No explicit severity was provided.

Event: #6492 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 22:28:16 GMT
Publisher date: Tue, 07 Jul 2026 11:54:16 GMT

Read the original announcement

advisoryUnratedOSV24 Oct 2026

Malicious code in lf295q1 (RubyGems)

--- _-= Per source details. Do not edit below this line.=-_

Announced 7 Jul 2026

lf295q1

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:MAL-2026-7998

lf295q1

Source reference: /affected/0/package/name

Affected versions: 0.0.104659
Source reference: /affected/0/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Publisher severity

No explicit severity was provided.

Event: #6491 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 22:28:16 GMT
Publisher date: Tue, 07 Jul 2026 11:56:04 GMT

Read the original announcement

advisoryUnratedOSV24 Oct 2026

Malicious code in lambfetch006 (RubyGems)

--- _-= Per source details. Do not edit below this line.=-_

Announced 7 Jul 2026

lambfetch006

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:MAL-2026-7804

lambfetch006

Source reference: /affected/0/package/name

Affected versions: 0.0.1
Source reference: /affected/0/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Publisher severity

No explicit severity was provided.

Event: #6490 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 22:28:15 GMT
Publisher date: Tue, 07 Jul 2026 11:54:14 GMT

Read the original announcement

Older events