Security feed

Back to latest events

24 October 2026

advisoryUnratedOSV24 Oct 2026

Malicious code in hrab0 (RubyGems)

--- _-= Per source details. Do not edit below this line.=-_

Announced 7 Jul 2026

hrab0

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:MAL-2026-7757

hrab0

Source reference: /affected/0/package/name

Affected versions: 0.0.1
Source reference: /affected/0/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Publisher severity

No explicit severity was provided.

Event: #6529 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 22:29:30 GMT
Publisher date: Tue, 07 Jul 2026 11:53:42 GMT

Read the original announcement

advisoryUnratedOSV24 Oct 2026

Malicious code in hgrangex6 (RubyGems)

--- _-= Per source details. Do not edit below this line.=-_

Announced 7 Jul 2026

hgrangex6

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:MAL-2026-7750

hgrangex6

Source reference: /affected/0/package/name

Affected versions: 0.0.1
Source reference: /affected/0/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Publisher severity

No explicit severity was provided.

Event: #6528 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 22:29:29 GMT
Publisher date: Tue, 07 Jul 2026 11:53:37 GMT

Read the original announcement

advisoryUnratedOSV24 Oct 2026

Malicious code in hgwenc (RubyGems)

--- _-= Per source details. Do not edit below this line.=-_

Announced 7 Jul 2026

hgwenc

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:MAL-2026-7756

hgwenc

Source reference: /affected/0/package/name

Affected versions: 0.0.1
Source reference: /affected/0/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Publisher severity

No explicit severity was provided.

Event: #6527 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 22:29:28 GMT
Publisher date: Tue, 07 Jul 2026 11:53:41 GMT

Read the original announcement

advisoryUnratedOSV24 Oct 2026

Malicious code in hraq1 (RubyGems)

--- _-= Per source details. Do not edit below this line.=-_

Announced 7 Jul 2026

hraq1

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:MAL-2026-7763

hraq1

Source reference: /affected/0/package/name

Affected versions: 0.0.1
Source reference: /affected/0/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Publisher severity

No explicit severity was provided.

Event: #6526 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 22:29:28 GMT
Publisher date: Tue, 07 Jul 2026 11:53:45 GMT

Read the original announcement

advisoryUnratedOSV24 Oct 2026

Malicious code in hgrangex7 (RubyGems)

--- _-= Per source details. Do not edit below this line.=-_

Announced 7 Jul 2026

hgrangex7

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:MAL-2026-7751

hgrangex7

Source reference: /affected/0/package/name

Affected versions: 0.0.1
Source reference: /affected/0/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Publisher severity

No explicit severity was provided.

Event: #6525 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 22:29:27 GMT
Publisher date: Tue, 07 Jul 2026 11:53:38 GMT

Read the original announcement

advisoryUnratedOSV24 Oct 2026

Malicious code in hgprobe28069 (RubyGems)

--- _-= Per source details. Do not edit below this line.=-_

Announced 7 Jul 2026

hgprobe28069

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:MAL-2026-7744

hgprobe28069

Source reference: /affected/0/package/name

Affected versions: 0.0.125608
Source reference: /affected/0/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Publisher severity

No explicit severity was provided.

Event: #6524 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 22:29:26 GMT
Publisher date: Tue, 07 Jul 2026 11:53:33 GMT

Read the original announcement

advisoryUnratedOSV24 Oct 2026

Malicious code in hrab4 (RubyGems)

--- _-= Per source details. Do not edit below this line.=-_

Announced 7 Jul 2026

hrab4

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:MAL-2026-7761

hrab4

Source reference: /affected/0/package/name

Affected versions: 0.0.1
Source reference: /affected/0/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Publisher severity

No explicit severity was provided.

Event: #6523 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 22:29:25 GMT
Publisher date: Tue, 07 Jul 2026 11:53:44 GMT

Read the original announcement

advisoryUnratedOSV24 Oct 2026

Malicious code in hola_rreichel3github (RubyGems)

--- _-= Per source details. Do not edit below this line.=-_

Announced 23 Dec 2025

hola_rreichel3github

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:MAL-2025-192908

hola_rreichel3github

Source reference: /affected/0/package/name

Affected versions: 0.0.10
Source reference: /affected/0/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Publisher severity

No explicit severity was provided.

Event: #6522 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 22:29:25 GMT
Publisher date: Tue, 23 Dec 2025 08:40:56 GMT

Read the original announcement

advisoryUnratedOSV24 Oct 2026

Malicious code in hgwcal2 (RubyGems)

--- _-= Per source details. Do not edit below this line.=-_

Announced 7 Jul 2026

hgwcal2

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:MAL-2026-7755

hgwcal2

Source reference: /affected/0/package/name

Affected versions: 0.0.1
Source reference: /affected/0/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Publisher severity

No explicit severity was provided.

Event: #6521 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 22:29:24 GMT
Publisher date: Tue, 07 Jul 2026 11:53:41 GMT

Read the original announcement

advisoryUnratedOSV24 Oct 2026

Malicious code in hgwcal1 (RubyGems)

--- _-= Per source details. Do not edit below this line.=-_

Announced 7 Jul 2026

hgwcal1

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:MAL-2026-7754

hgwcal1

Source reference: /affected/0/package/name

Affected versions: 0.0.1
Source reference: /affected/0/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Publisher severity

No explicit severity was provided.

Event: #6520 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 22:29:23 GMT
Publisher date: Tue, 07 Jul 2026 11:53:41 GMT

Read the original announcement

advisoryUnratedOSV24 Oct 2026

Malicious code in hgrangex4 (RubyGems)

--- _-= Per source details. Do not edit below this line.=-_

Announced 7 Jul 2026

hgrangex4

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:MAL-2026-7748

hgrangex4

Source reference: /affected/0/package/name

Affected versions: 0.0.1
Source reference: /affected/0/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Publisher severity

No explicit severity was provided.

Event: #6519 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 22:29:22 GMT
Publisher date: Tue, 07 Jul 2026 11:53:36 GMT

Read the original announcement

advisoryUnratedOSV24 Oct 2026

Malicious code in hockeystick (RubyGems)

--- _-= Per source details. Do not edit below this line.=-_

Announced 23 Dec 2025

hockeystick

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:MAL-2025-192907

hockeystick

Source reference: /affected/0/package/name

Affected versions: 5.0.0
Source reference: /affected/0/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Publisher severity

No explicit severity was provided.

Event: #6518 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 22:29:22 GMT
Publisher date: Tue, 23 Dec 2025 08:40:55 GMT

Read the original announcement

advisoryUnratedOSV24 Oct 2026

Malicious code in hrab2 (RubyGems)

--- _-= Per source details. Do not edit below this line.=-_

Announced 7 Jul 2026

hrab2

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:MAL-2026-7759

hrab2

Source reference: /affected/0/package/name

Affected versions: 0.0.1
Source reference: /affected/0/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Publisher severity

No explicit severity was provided.

Event: #6517 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 22:29:21 GMT
Publisher date: Tue, 07 Jul 2026 11:53:43 GMT

Read the original announcement

advisoryUnratedOSV24 Oct 2026

Malicious code in hgrangex5 (RubyGems)

--- _-= Per source details. Do not edit below this line.=-_

Announced 7 Jul 2026

hgrangex5

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:MAL-2026-7749

hgrangex5

Source reference: /affected/0/package/name

Affected versions: 0.0.1
Source reference: /affected/0/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Publisher severity

No explicit severity was provided.

Event: #6516 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 22:29:20 GMT
Publisher date: Tue, 07 Jul 2026 11:53:37 GMT

Read the original announcement

advisoryUnratedOSV24 Oct 2026

Malicious code in hgprobe26718 (RubyGems)

--- _-= Per source details. Do not edit below this line.=-_

Announced 7 Jul 2026

hgprobe26718

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:MAL-2026-7743

hgprobe26718

Source reference: /affected/0/package/name

Affected versions: 0.0.799406
Source reference: /affected/0/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Publisher severity

No explicit severity was provided.

Event: #6515 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 22:29:19 GMT
Publisher date: Tue, 07 Jul 2026 11:53:33 GMT

Read the original announcement

advisoryUnratedOSV24 Oct 2026

Malicious code in hgrangex3 (RubyGems)

--- _-= Per source details. Do not edit below this line.=-_

Announced 7 Jul 2026

hgrangex3

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:MAL-2026-7747

hgrangex3

Source reference: /affected/0/package/name

Affected versions: 0.0.1
Source reference: /affected/0/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Publisher severity

No explicit severity was provided.

Event: #6514 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 22:29:18 GMT
Publisher date: Tue, 07 Jul 2026 11:53:35 GMT

Read the original announcement

advisoryUnratedOSV24 Oct 2026

Malicious code in hraq0 (RubyGems)

--- _-= Per source details. Do not edit below this line.=-_

Announced 7 Jul 2026

hraq0

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:MAL-2026-7762

hraq0

Source reference: /affected/0/package/name

Affected versions: 0.0.1
Source reference: /affected/0/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Publisher severity

No explicit severity was provided.

Event: #6513 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 22:28:25 GMT
Publisher date: Tue, 07 Jul 2026 11:53:44 GMT

Read the original announcement

advisoryUnratedOSV24 Oct 2026

Malicious code in hgrangex1 (RubyGems)

--- _-= Per source details. Do not edit below this line.=-_

Announced 7 Jul 2026

hgrangex1

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:MAL-2026-7745

hgrangex1

Source reference: /affected/0/package/name

Affected versions: 0.0.1
Source reference: /affected/0/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Publisher severity

No explicit severity was provided.

Event: #6512 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 22:28:24 GMT
Publisher date: Tue, 07 Jul 2026 11:53:34 GMT

Read the original announcement

advisoryUnratedOSV24 Oct 2026

Malicious code in hgrangex8 (RubyGems)

--- _-= Per source details. Do not edit below this line.=-_

Announced 7 Jul 2026

hgrangex8

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:MAL-2026-7752

hgrangex8

Source reference: /affected/0/package/name

Affected versions: 0.0.1
Source reference: /affected/0/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Publisher severity

No explicit severity was provided.

Event: #6511 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 22:28:23 GMT
Publisher date: Tue, 07 Jul 2026 11:53:39 GMT

Read the original announcement

advisoryUnratedOSV24 Oct 2026

Malicious code in hgrangex2 (RubyGems)

--- _-= Per source details. Do not edit below this line.=-_

Announced 7 Jul 2026

hgrangex2

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:MAL-2026-7746

hgrangex2

Source reference: /affected/0/package/name

Affected versions: 0.0.1
Source reference: /affected/0/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Publisher severity

No explicit severity was provided.

Event: #6510 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 22:28:23 GMT
Publisher date: Tue, 07 Jul 2026 11:53:35 GMT

Read the original announcement

Older events