Security feed

24 October 2026

advisoryOSV24 Oct 2026

Malicious code in meet8178a (RubyGems)

--- _-= Per source details. Do not edit below this line.=-_

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:MAL-2026-8084

meet8178a

Source reference: /affected/0/package/name

Affected versions: 0.0.1
Source reference: /affected/0/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Publisher severity

No explicit severity was provided.

Event: #6909 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 22:35:23 GMT
Publisher date: Tue, 07 Jul 2026 11:56:57 GMT

Read the original announcement

advisoryOSV24 Oct 2026

Malicious code in m8403v4kng (RubyGems)

--- _-= Per source details. Do not edit below this line.=-_

m8403v4kng

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:MAL-2026-8076

m8403v4kng

Source reference: /affected/0/package/name

Affected versions: 0.0.1
Source reference: /affected/0/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Publisher severity

No explicit severity was provided.

Event: #6908 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 22:35:23 GMT
Publisher date: Tue, 07 Jul 2026 11:56:52 GMT

Read the original announcement

advisoryOSV24 Oct 2026

Malicious code in metatestmyprfolx (RubyGems)

--- _-= Per source details. Do not edit below this line.=-_

metatestmyprfolx

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:MAL-2026-8091

metatestmyprfolx

Source reference: /affected/0/package/name

Affected versions: 0.0.1
Source reference: /affected/0/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Publisher severity

No explicit severity was provided.

Event: #6907 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 22:35:22 GMT
Publisher date: Tue, 07 Jul 2026 11:57:01 GMT

Read the original announcement

advisoryOSV24 Oct 2026

Malicious code in m8405v0nhw (RubyGems)

--- _-= Per source details. Do not edit below this line.=-_

m8405v0nhw

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:MAL-2026-8078

m8405v0nhw

Source reference: /affected/0/package/name

Affected versions: 0.0.1
Source reference: /affected/0/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Publisher severity

No explicit severity was provided.

Event: #6906 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 22:35:21 GMT
Publisher date: Tue, 07 Jul 2026 11:56:52 GMT

Read the original announcement

advisoryOSV24 Oct 2026

Malicious code in m8403v5qvm (RubyGems)

--- _-= Per source details. Do not edit below this line.=-_

m8403v5qvm

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:MAL-2026-8077

m8403v5qvm

Source reference: /affected/0/package/name

Affected versions: 0.0.1
Source reference: /affected/0/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Publisher severity

No explicit severity was provided.

Event: #6905 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 22:35:20 GMT
Publisher date: Tue, 07 Jul 2026 11:56:52 GMT

Read the original announcement

advisoryOSV24 Oct 2026

Malicious code in m8402v5qwf (RubyGems)

--- _-= Per source details. Do not edit below this line.=-_

m8402v5qwf

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:MAL-2026-8071

m8402v5qwf

Source reference: /affected/0/package/name

Affected versions: 0.0.1
Source reference: /affected/0/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Publisher severity

No explicit severity was provided.

Event: #6904 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 22:35:19 GMT
Publisher date: Tue, 07 Jul 2026 11:56:48 GMT

Read the original announcement

advisoryOSV24 Oct 2026

Malicious code in m8402v2ggi (RubyGems)

--- _-= Per source details. Do not edit below this line.=-_

m8402v2ggi

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:MAL-2026-8068

m8402v2ggi

Source reference: /affected/0/package/name

Affected versions: 0.0.1
Source reference: /affected/0/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Publisher severity

No explicit severity was provided.

Event: #6903 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 22:35:19 GMT
Publisher date: Tue, 07 Jul 2026 11:56:46 GMT

Read the original announcement

advisoryOSV24 Oct 2026

Malicious code in modgovexf573845 (RubyGems)

--- _-= Per source details. Do not edit below this line.=-_

modgovexf573845

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:MAL-2026-8093

modgovexf573845

Source reference: /affected/0/package/name

Affected versions: 0.0.1
Source reference: /affected/0/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Publisher severity

No explicit severity was provided.

Event: #6902 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 22:35:18 GMT
Publisher date: Tue, 07 Jul 2026 11:57:03 GMT

Read the original announcement

advisoryOSV24 Oct 2026

Malicious code in monolith-twirp-pullsd-authorization (RubyGems)

--- _-= Per source details. Do not edit below this line.=-_

monolith-twirp-pullsd-authorization

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:MAL-2026-2815

monolith-twirp-pullsd-authorization

Source reference: /affected/0/package/name

Affected versions: 0.0.1
Source reference: /affected/0/versions
1.0.4
Source reference: /affected/0/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Publisher severity

No explicit severity was provided.

Event: #6901 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 22:35:18 GMT
Publisher date: Thu, 16 Apr 2026 10:28:47 GMT

Read the original announcement

advisoryOSV24 Oct 2026

Malicious code in m8405v4bpo (RubyGems)

--- _-= Per source details. Do not edit below this line.=-_

m8405v4bpo

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:MAL-2026-8082

m8405v4bpo

Source reference: /affected/0/package/name

Affected versions: 0.0.1
Source reference: /affected/0/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Publisher severity

No explicit severity was provided.

Event: #6900 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 22:35:17 GMT
Publisher date: Tue, 07 Jul 2026 11:56:55 GMT

Read the original announcement

advisoryOSV24 Oct 2026

Malicious code in m8403v0lws (RubyGems)

--- _-= Per source details. Do not edit below this line.=-_

m8403v0lws

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:MAL-2026-8072

m8403v0lws

Source reference: /affected/0/package/name

Affected versions: 0.0.1
Source reference: /affected/0/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Publisher severity

No explicit severity was provided.

Event: #6899 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 22:35:16 GMT
Publisher date: Tue, 07 Jul 2026 11:56:49 GMT

Read the original announcement

advisoryOSV24 Oct 2026

Malicious code in movingsign-api (RubyGems)

--- _-= Per source details. Do not edit below this line.=-_

movingsign-api

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:MAL-2024-6993

movingsign-api

Source reference: /affected/0/package/name

Affected versions: 0.0.2
Source reference: /affected/0/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Publisher severity

No explicit severity was provided.

Event: #6898 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 22:35:16 GMT
Publisher date: Tue, 25 Jun 2024 13:51:53 GMT

Read the original announcement

advisoryOSV24 Oct 2026

Malicious code in m8405v5lmc (RubyGems)

--- _-= Per source details. Do not edit below this line.=-_

m8405v5lmc

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:MAL-2026-8083

m8405v5lmc

Source reference: /affected/0/package/name

Affected versions: 0.0.1
Source reference: /affected/0/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Publisher severity

No explicit severity was provided.

Event: #6897 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 22:35:15 GMT
Publisher date: Tue, 07 Jul 2026 11:56:55 GMT

Read the original announcement

advisoryOSV24 Oct 2026

Malicious code in mt8402zmle (RubyGems)

--- _-= Per source details. Do not edit below this line.=-_

mt8402zmle

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:MAL-2026-8098

mt8402zmle

Source reference: /affected/0/package/name

Affected versions: 0.0.1
Source reference: /affected/0/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Publisher severity

No explicit severity was provided.

Event: #6896 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 22:35:15 GMT
Publisher date: Tue, 07 Jul 2026 11:57:06 GMT

Read the original announcement

advisoryOSV24 Oct 2026

Malicious code in melio-platform-api-client (RubyGems)

--- _-= Per source details. Do not edit below this line.=-_ ## Source: ossf-package-analysis (cb4e0efafa3bf0645819f2aa88cfdc7778f938470c0984afc5e1f1504df982aa) The OpenSSF Package Analysis project identified 'melio-platform-api-client' @ 5.0.0 (rubygems) as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity.

melio-platform-api-client

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:MAL-2024-7834

melio-platform-api-client

Source reference: /affected/0/package/name

Affected versions: 5.0.0
Source reference: /affected/0/versions
3.0.1
Source reference: /affected/0/versions
3.1.1
Source reference: /affected/0/versions
3.1.2
Source reference: /affected/0/versions
3.1.4
Source reference: /affected/0/versions
4.4.4
Source reference: /affected/0/versions
4.4.5
Source reference: /affected/0/versions
4.4.6
Source reference: /affected/0/versions
5.0.1
Source reference: /affected/0/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Publisher severity

No explicit severity was provided.

Event: #6895 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 22:35:14 GMT
Publisher date: Sun, 28 Jul 2024 23:15:41 GMT

Read the original announcement

advisoryOSV24 Oct 2026

Malicious code in m8405v2llz (RubyGems)

--- _-= Per source details. Do not edit below this line.=-_

m8405v2llz

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:MAL-2026-8080

m8405v2llz

Source reference: /affected/0/package/name

Affected versions: 0.0.1
Source reference: /affected/0/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Publisher severity

No explicit severity was provided.

Event: #6894 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 22:35:13 GMT
Publisher date: Tue, 07 Jul 2026 11:56:53 GMT

Read the original announcement

advisoryOSV24 Oct 2026

Malicious code in metatestabcxyz (RubyGems)

--- _-= Per source details. Do not edit below this line.=-_

metatestabcxyz

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:MAL-2026-8088

metatestabcxyz

Source reference: /affected/0/package/name

Affected versions: 0.0.1
Source reference: /affected/0/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Publisher severity

No explicit severity was provided.

Event: #6893 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 22:35:13 GMT
Publisher date: Tue, 07 Jul 2026 11:56:59 GMT

Read the original announcement

advisoryOSV24 Oct 2026

Malicious code in murmuring-spider (RubyGems)

--- _-= Per source details. Do not edit below this line.=-_

murmuring-spider

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:MAL-2024-6995

murmuring-spider

Source reference: /affected/0/package/name

Affected versions: 0.0.2
Source reference: /affected/0/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Publisher severity

No explicit severity was provided.

Event: #6892 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 22:35:12 GMT
Publisher date: Tue, 25 Jun 2024 13:51:54 GMT

Read the original announcement

advisoryOSV24 Oct 2026

Malicious code in mvv1 (RubyGems)

--- _-= Per source details. Do not edit below this line.=-_

mvv1

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:MAL-2026-8102

mvv1

Source reference: /affected/0/package/name

Affected versions: 0.0.1
Source reference: /affected/0/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Publisher severity

No explicit severity was provided.

Event: #6891 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 22:35:11 GMT
Publisher date: Tue, 07 Jul 2026 11:57:07 GMT

Read the original announcement

advisoryOSV24 Oct 2026

Malicious code in m8405v3bjn (RubyGems)

--- _-= Per source details. Do not edit below this line.=-_

m8405v3bjn

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:MAL-2026-8081

m8405v3bjn

Source reference: /affected/0/package/name

Affected versions: 0.0.1
Source reference: /affected/0/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Publisher severity

No explicit severity was provided.

Event: #6890 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 22:35:11 GMT
Publisher date: Tue, 07 Jul 2026 11:56:54 GMT

Read the original announcement

Older events