Heist/ feed

Security feed

advisoryOSV

Malicious code in melio-platform-api-client (RubyGems)

--- _-= Per source details. Do not edit below this line.=-_ ## Source: ossf-package-analysis (cb4e0efafa3bf0645819f2aa88cfdc7778f938470c0984afc5e1f1504df982aa) The OpenSSF Package Analysis project identified 'melio-platform-api-client' @ 5.0.0 (rubygems) as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity.

melio-platform-api-client
Structured advisory · Revision 1Original source
Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:MAL-2024-7834

melio-platform-api-client

Source reference: /affected/0/package/name

Affected versions
5.0.0

Source reference: /affected/0/versions

3.0.1

Source reference: /affected/0/versions

3.1.1

Source reference: /affected/0/versions

3.1.2

Source reference: /affected/0/versions

3.1.4

Source reference: /affected/0/versions

4.4.4

Source reference: /affected/0/versions

4.4.5

Source reference: /affected/0/versions

4.4.6

Source reference: /affected/0/versions

5.0.1

Source reference: /affected/0/versions

Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Publisher severity

No explicit severity was provided.

Event
#6895 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement