Security feed

Back to latest events

24 October 2026

advisoryUnratedOSV24 Oct 2026

Malicious code in linkpxstat (RubyGems)

--- _-= Per source details. Do not edit below this line.=-_

Announced 7 Jul 2026

linkpxstat

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:MAL-2026-8022

linkpxstat

Source reference: /affected/0/package/name

Affected versions: 0.0.1
Source reference: /affected/0/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Publisher severity

No explicit severity was provided.

Event: #6549 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 22:29:43 GMT
Publisher date: Tue, 07 Jul 2026 11:56:19 GMT

Read the original announcement

advisoryUnratedOSV24 Oct 2026

Malicious code in lf295s2 (RubyGems)

--- _-= Per source details. Do not edit below this line.=-_

Announced 7 Jul 2026

lf295s2

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:MAL-2026-8018

lf295s2

Source reference: /affected/0/package/name

Affected versions: 0.0.823537
Source reference: /affected/0/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Publisher severity

No explicit severity was provided.

Event: #6548 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 22:29:42 GMT
Publisher date: Tue, 07 Jul 2026 11:56:17 GMT

Read the original announcement

advisoryUnratedOSV24 Oct 2026

Malicious code in lf295q2 (RubyGems)

--- _-= Per source details. Do not edit below this line.=-_

Announced 7 Jul 2026

lf295q2

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:MAL-2026-8005

lf295q2

Source reference: /affected/0/package/name

Affected versions: 0.0.191731
Source reference: /affected/0/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Publisher severity

No explicit severity was provided.

Event: #6547 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 22:29:42 GMT
Publisher date: Tue, 07 Jul 2026 11:56:08 GMT

Read the original announcement

advisoryUnratedOSV24 Oct 2026

Malicious code in localnewstesta (RubyGems)

--- _-= Per source details. Do not edit below this line.=-_

Announced 7 Jul 2026

localnewstesta

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:MAL-2026-8024

localnewstesta

Source reference: /affected/0/package/name

Affected versions: 0.0.1
Source reference: /affected/0/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Publisher severity

No explicit severity was provided.

Event: #6546 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 22:29:41 GMT
Publisher date: Tue, 07 Jul 2026 11:56:21 GMT

Read the original announcement

advisoryUnratedOSV24 Oct 2026

Malicious code in lf295r0 (RubyGems)

--- _-= Per source details. Do not edit below this line.=-_

Announced 7 Jul 2026

lf295r0

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:MAL-2026-8013

lf295r0

Source reference: /affected/0/package/name

Affected versions: 0.0.248998
Source reference: /affected/0/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Publisher severity

No explicit severity was provided.

Event: #6545 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 22:29:40 GMT
Publisher date: Tue, 07 Jul 2026 11:56:14 GMT

Read the original announcement

advisoryUnratedOSV24 Oct 2026

Malicious code in lf295q5 (RubyGems)

--- _-= Per source details. Do not edit below this line.=-_

Announced 7 Jul 2026

lf295q5

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:MAL-2026-8008

lf295q5

Source reference: /affected/0/package/name

Affected versions: 0.0.295929
Source reference: /affected/0/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Publisher severity

No explicit severity was provided.

Event: #6544 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 22:29:40 GMT
Publisher date: Tue, 07 Jul 2026 11:56:10 GMT

Read the original announcement

advisoryUnratedOSV24 Oct 2026

Malicious code in lf295s3 (RubyGems)

--- _-= Per source details. Do not edit below this line.=-_

Announced 7 Jul 2026

lf295s3

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:MAL-2026-8019

lf295s3

Source reference: /affected/0/package/name

Affected versions: 0.0.894635
Source reference: /affected/0/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Publisher severity

No explicit severity was provided.

Event: #6543 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 22:29:39 GMT
Publisher date: Tue, 07 Jul 2026 11:56:18 GMT

Read the original announcement

advisoryUnratedOSV24 Oct 2026

Malicious code in lf295q9 (RubyGems)

--- _-= Per source details. Do not edit below this line.=-_

Announced 7 Jul 2026

lf295q9

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:MAL-2026-8012

lf295q9

Source reference: /affected/0/package/name

Affected versions: 0.0.119063
Source reference: /affected/0/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Publisher severity

No explicit severity was provided.

Event: #6542 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 22:29:39 GMT
Publisher date: Tue, 07 Jul 2026 11:56:13 GMT

Read the original announcement

advisoryUnratedOSV24 Oct 2026

Malicious code in lambcal434a1 (RubyGems)

--- _-= Per source details. Do not edit below this line.=-_

Announced 7 Jul 2026

lambcal434a1

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:MAL-2026-7786

lambcal434a1

Source reference: /affected/0/package/name

Affected versions: 0.0.1
Source reference: /affected/0/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Publisher severity

No explicit severity was provided.

Event: #6541 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 22:29:38 GMT
Publisher date: Tue, 07 Jul 2026 11:54:04 GMT

Read the original announcement

advisoryUnratedOSV24 Oct 2026

Malicious code in kevins-propietary_brain (RubyGems)

--- _-= Per source details. Do not edit below this line.=-_

Announced 25 Jun 2024

kevins-propietary_brain

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:MAL-2024-6953

kevins-propietary_brain

Source reference: /affected/0/package/name

Affected versions: 0.0.1
Source reference: /affected/0/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Publisher severity

No explicit severity was provided.

Event: #6540 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 22:29:37 GMT
Publisher date: Tue, 25 Jun 2024 13:51:27 GMT

Read the original announcement

advisoryUnratedOSV24 Oct 2026

Malicious code in lambethscraper1778555936 (RubyGems)

--- _-= Per source details. Do not edit below this line.=-_

Announced 7 Jul 2026

lambethscraper1778555936

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:MAL-2026-7793

lambethscraper1778555936

Source reference: /affected/0/package/name

Affected versions: 0.0.2
Source reference: /affected/0/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Publisher severity

No explicit severity was provided.

Event: #6539 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 22:29:37 GMT
Publisher date: Tue, 07 Jul 2026 11:54:07 GMT

Read the original announcement

advisoryUnratedOSV24 Oct 2026

Malicious code in hrab1 (RubyGems)

--- _-= Per source details. Do not edit below this line.=-_

Announced 7 Jul 2026

hrab1

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:MAL-2026-7758

hrab1

Source reference: /affected/0/package/name

Affected versions: 0.0.1
Source reference: /affected/0/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Publisher severity

No explicit severity was provided.

Event: #6538 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 22:29:36 GMT
Publisher date: Tue, 07 Jul 2026 11:53:43 GMT

Read the original announcement

advisoryUnratedOSV24 Oct 2026

Malicious code in lai67123812 (RubyGems)

--- _-= Per source details. Do not edit below this line.=-_

Announced 7 Jul 2026

lai67123812

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:MAL-2026-7784

lai67123812

Source reference: /affected/0/package/name

Affected versions: 0.0.70812
Source reference: /affected/0/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Publisher severity

No explicit severity was provided.

Event: #6537 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 22:29:35 GMT
Publisher date: Tue, 07 Jul 2026 11:53:58 GMT

Read the original announcement

advisoryUnratedOSV24 Oct 2026

Malicious code in hide-asset_logs (RubyGems)

--- _-= Per source details. Do not edit below this line.=-_

Announced 25 Jun 2024

hide-asset_logs

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:MAL-2024-6944

hide-asset_logs

Source reference: /affected/0/package/name

Affected versions: 1.0.0
Source reference: /affected/0/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Publisher severity

No explicit severity was provided.

Event: #6536 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 22:29:34 GMT
Publisher date: Tue, 25 Jun 2024 13:51:22 GMT

Read the original announcement

advisoryUnratedOSV24 Oct 2026

Malicious code in lambehgnewhttp31593 (RubyGems)

--- _-= Per source details. Do not edit below this line.=-_

Announced 7 Jul 2026

lambehgnewhttp31593

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:MAL-2026-7790

lambehgnewhttp31593

Source reference: /affected/0/package/name

Affected versions: 0.0.1
Source reference: /affected/0/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Publisher severity

No explicit severity was provided.

Event: #6535 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 22:29:34 GMT
Publisher date: Tue, 07 Jul 2026 11:54:05 GMT

Read the original announcement

advisoryUnratedOSV24 Oct 2026

Malicious code in hraq3 (RubyGems)

--- _-= Per source details. Do not edit below this line.=-_

Announced 7 Jul 2026

hraq3

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:MAL-2026-7765

hraq3

Source reference: /affected/0/package/name

Affected versions: 0.0.1
Source reference: /affected/0/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Publisher severity

No explicit severity was provided.

Event: #6534 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 22:29:33 GMT
Publisher date: Tue, 07 Jul 2026 11:53:46 GMT

Read the original announcement

advisoryUnratedOSV24 Oct 2026

Malicious code in lambethscraper1778549610 (RubyGems)

--- _-= Per source details. Do not edit below this line.=-_

Announced 7 Jul 2026

lambethscraper1778549610

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:MAL-2026-7792

lambethscraper1778549610

Source reference: /affected/0/package/name

Affected versions: 0.0.1
Source reference: /affected/0/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Publisher severity

No explicit severity was provided.

Event: #6533 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 22:29:32 GMT
Publisher date: Tue, 07 Jul 2026 11:54:07 GMT

Read the original announcement

advisoryUnratedOSV24 Oct 2026

Malicious code in lai67121802 (RubyGems)

--- _-= Per source details. Do not edit below this line.=-_

Announced 7 Jul 2026

lai67121802

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:MAL-2026-7782

lai67121802

Source reference: /affected/0/package/name

Affected versions: 0.0.70802
Source reference: /affected/0/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Publisher severity

No explicit severity was provided.

Event: #6532 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 22:29:31 GMT
Publisher date: Tue, 07 Jul 2026 11:53:57 GMT

Read the original announcement

advisoryUnratedOSV24 Oct 2026

Malicious code in lambethssrfcal (RubyGems)

--- _-= Per source details. Do not edit below this line.=-_

Announced 7 Jul 2026

lambethssrfcal

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:MAL-2026-7795

lambethssrfcal

Source reference: /affected/0/package/name

Affected versions: 0.0.1
Source reference: /affected/0/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Publisher severity

No explicit severity was provided.

Event: #6531 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 22:29:31 GMT
Publisher date: Tue, 07 Jul 2026 11:54:08 GMT

Read the original announcement

advisoryUnratedOSV24 Oct 2026

Malicious code in hgprobe23760 (RubyGems)

--- _-= Per source details. Do not edit below this line.=-_

Announced 7 Jul 2026

hgprobe23760

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:MAL-2026-7742

hgprobe23760

Source reference: /affected/0/package/name

Affected versions: 0.0.459341
Source reference: /affected/0/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Publisher severity

No explicit severity was provided.

Event: #6530 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 22:29:30 GMT
Publisher date: Tue, 07 Jul 2026 11:53:32 GMT

Read the original announcement

Older events