Security feed

24 October 2026

advisoryOSV24 Oct 2026

Malicious code in lambhgampxyz (RubyGems)

--- _-= Per source details. Do not edit below this line.=-_

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:MAL-2026-7806

lambhgampxyz

Source reference: /affected/0/package/name

Affected versions: 0.0.1
Source reference: /affected/0/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Publisher severity

No explicit severity was provided.

Event: #6609 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 22:30:24 GMT
Publisher date: Tue, 07 Jul 2026 11:54:15 GMT

Read the original announcement

advisoryOSV24 Oct 2026

Malicious code in hwc5v (RubyGems)

--- _-= Per source details. Do not edit below this line.=-_

hwc5v

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:MAL-2026-7773

hwc5v

Source reference: /affected/0/package/name

Affected versions: 0.0.1
Source reference: /affected/0/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Publisher severity

No explicit severity was provided.

Event: #6608 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 22:30:23 GMT
Publisher date: Tue, 07 Jul 2026 11:53:51 GMT

Read the original announcement

advisoryOSV24 Oct 2026

Malicious code in lambprobe7763 (RubyGems)

--- _-= Per source details. Do not edit below this line.=-_

lambprobe7763

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:MAL-2026-7819

lambprobe7763

Source reference: /affected/0/package/name

Affected versions: 0.0.1
Source reference: /affected/0/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Publisher severity

No explicit severity was provided.

Event: #6607 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 22:30:22 GMT
Publisher date: Tue, 07 Jul 2026 11:54:23 GMT

Read the original announcement

advisoryOSV24 Oct 2026

Malicious code in lambprobe4344 (RubyGems)

--- _-= Per source details. Do not edit below this line.=-_

lambprobe4344

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:MAL-2026-7818

lambprobe4344

Source reference: /affected/0/package/name

Affected versions: 0.0.1
Source reference: /affected/0/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Publisher severity

No explicit severity was provided.

Event: #6606 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 22:30:21 GMT
Publisher date: Tue, 07 Jul 2026 11:54:22 GMT

Read the original announcement

advisoryOSV24 Oct 2026

Malicious code in lambfetch003 (RubyGems)

--- _-= Per source details. Do not edit below this line.=-_

lambfetch003

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:MAL-2026-7801

lambfetch003

Source reference: /affected/0/package/name

Affected versions: 0.0.1
Source reference: /affected/0/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Publisher severity

No explicit severity was provided.

Event: #6605 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 22:30:21 GMT
Publisher date: Tue, 07 Jul 2026 11:54:12 GMT

Read the original announcement

advisoryOSV24 Oct 2026

Malicious code in http-statsd (RubyGems)

--- _-= Per source details. Do not edit below this line.=-_

http-statsd

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:MAL-2024-6945

http-statsd

Source reference: /affected/0/package/name

Affected versions: 0.0.2
Source reference: /affected/0/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Publisher severity

No explicit severity was provided.

Event: #6604 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 22:30:20 GMT
Publisher date: Tue, 25 Jun 2024 13:51:22 GMT

Read the original announcement

advisoryOSV24 Oct 2026

Malicious code in injectwanfoo (RubyGems)

--- _-= Per source details. Do not edit below this line.=-_

injectwanfoo

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:MAL-2026-7779

injectwanfoo

Source reference: /affected/0/package/name

Affected versions: 0.0.2
Source reference: /affected/0/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Publisher severity

No explicit severity was provided.

Event: #6603 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 22:30:19 GMT
Publisher date: Tue, 07 Jul 2026 11:53:55 GMT

Read the original announcement

advisoryOSV24 Oct 2026

Malicious code in idleprobezz001177 (RubyGems)

--- _-= Per source details. Do not edit below this line.=-_

idleprobezz001177

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:MAL-2026-7777

idleprobezz001177

Source reference: /affected/0/package/name

Affected versions: 0.0.1
Source reference: /affected/0/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Publisher severity

No explicit severity was provided.

Event: #6602 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 22:30:18 GMT
Publisher date: Tue, 07 Jul 2026 11:53:54 GMT

Read the original announcement

advisoryOSV24 Oct 2026

Malicious code in hwc1v (RubyGems)

--- _-= Per source details. Do not edit below this line.=-_

hwc1v

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:MAL-2026-7769

hwc1v

Source reference: /affected/0/package/name

Affected versions: 0.0.1
Source reference: /affected/0/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Publisher severity

No explicit severity was provided.

Event: #6601 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 22:30:17 GMT
Publisher date: Tue, 07 Jul 2026 11:53:48 GMT

Read the original announcement

advisoryOSV24 Oct 2026

Malicious code in hwc6v (RubyGems)

--- _-= Per source details. Do not edit below this line.=-_

hwc6v

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:MAL-2026-7774

hwc6v

Source reference: /affected/0/package/name

Affected versions: 0.0.1
Source reference: /affected/0/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Publisher severity

No explicit severity was provided.

Event: #6600 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 22:30:17 GMT
Publisher date: Tue, 07 Jul 2026 11:53:51 GMT

Read the original announcement

advisoryOSV24 Oct 2026

Malicious code in html_scrubber (RubyGems)

--- _-= Per source details. Do not edit below this line.=-_

html_scrubber

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:MAL-2025-192909

html_scrubber

Source reference: /affected/0/package/name

Affected versions: 90002.0
Source reference: /affected/0/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Publisher severity

No explicit severity was provided.

Event: #6599 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 22:30:16 GMT
Publisher date: Tue, 23 Dec 2025 08:40:57 GMT

Read the original announcement

advisoryOSV24 Oct 2026

Malicious code in hwc2v (RubyGems)

--- _-= Per source details. Do not edit below this line.=-_

hwc2v

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:MAL-2026-7770

hwc2v

Source reference: /affected/0/package/name

Affected versions: 0.0.1
Source reference: /affected/0/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Publisher severity

No explicit severity was provided.

Event: #6598 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 22:30:15 GMT
Publisher date: Tue, 07 Jul 2026 11:53:49 GMT

Read the original announcement

advisoryOSV24 Oct 2026

Malicious code in hraq4 (RubyGems)

--- _-= Per source details. Do not edit below this line.=-_

hraq4

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:MAL-2026-7766

hraq4

Source reference: /affected/0/package/name

Affected versions: 0.0.1
Source reference: /affected/0/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Publisher severity

No explicit severity was provided.

Event: #6597 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 22:30:14 GMT
Publisher date: Tue, 07 Jul 2026 11:53:46 GMT

Read the original announcement

advisoryOSV24 Oct 2026

Malicious code in irs_data (RubyGems)

--- _-= Per source details. Do not edit below this line.=-_

irs_data

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:MAL-2024-6947

irs_data

Source reference: /affected/0/package/name

Affected versions: 9.9.9
Source reference: /affected/0/versions
9.9.999
Source reference: /affected/0/versions
9.9.9999911
Source reference: /affected/0/versions
9.9.9999
Source reference: /affected/0/versions
9.9.99999
Source reference: /affected/0/versions
9.9.999991
Source reference: /affected/0/versions
9.9.99
Source reference: /affected/0/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Publisher severity

No explicit severity was provided.

Event: #6596 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 22:30:13 GMT
Publisher date: Tue, 25 Jun 2024 13:51:24 GMT

Read the original announcement

advisoryOSV24 Oct 2026

Malicious code in hwc3v (RubyGems)

--- _-= Per source details. Do not edit below this line.=-_

hwc3v

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:MAL-2026-7771

hwc3v

Source reference: /affected/0/package/name

Affected versions: 0.0.1
Source reference: /affected/0/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Publisher severity

No explicit severity was provided.

Event: #6595 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 22:30:13 GMT
Publisher date: Tue, 07 Jul 2026 11:53:50 GMT

Read the original announcement

advisoryOSV24 Oct 2026

Malicious code in indonesian-province (RubyGems)

--- _-= Per source details. Do not edit below this line.=-_

indonesian-province

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:MAL-2024-6946

indonesian-province

Source reference: /affected/0/package/name

Affected versions: 0.0.2
Source reference: /affected/0/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Publisher severity

No explicit severity was provided.

Event: #6594 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 22:30:12 GMT
Publisher date: Tue, 25 Jun 2024 13:51:23 GMT

Read the original announcement

advisoryOSV24 Oct 2026

Malicious code in jaconda-telegram (RubyGems)

--- _-= Per source details. Do not edit below this line.=-_

jaconda-telegram

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:MAL-2024-6948

jaconda-telegram

Source reference: /affected/0/package/name

Affected versions: 1.0
Source reference: /affected/0/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Publisher severity

No explicit severity was provided.

Event: #6593 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 22:30:11 GMT
Publisher date: Tue, 25 Jun 2024 13:51:24 GMT

Read the original announcement

advisoryOSV24 Oct 2026

Malicious code in hwc0v (RubyGems)

--- _-= Per source details. Do not edit below this line.=-_

hwc0v

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:MAL-2026-7768

hwc0v

Source reference: /affected/0/package/name

Affected versions: 0.0.1
Source reference: /affected/0/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Publisher severity

No explicit severity was provided.

Event: #6592 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 22:30:10 GMT
Publisher date: Tue, 07 Jul 2026 11:53:47 GMT

Read the original announcement

advisoryOSV24 Oct 2026

Malicious code in hwc7v (RubyGems)

--- _-= Per source details. Do not edit below this line.=-_

hwc7v

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:MAL-2026-7775

hwc7v

Source reference: /affected/0/package/name

Affected versions: 0.0.1
Source reference: /affected/0/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Publisher severity

No explicit severity was provided.

Event: #6591 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 22:30:10 GMT
Publisher date: Tue, 07 Jul 2026 11:53:52 GMT

Read the original announcement

advisoryOSV24 Oct 2026

Malicious code in hwc8v (RubyGems)

--- _-= Per source details. Do not edit below this line.=-_

hwc8v

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:MAL-2026-7776

hwc8v

Source reference: /affected/0/package/name

Affected versions: 0.0.1
Source reference: /affected/0/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Publisher severity

No explicit severity was provided.

Event: #6590 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 22:30:09 GMT
Publisher date: Tue, 07 Jul 2026 11:53:53 GMT

Read the original announcement

Older events