Malicious code in melio-platform-api-client (RubyGems)
--- _-= Per source details. Do not edit below this line.=-_ ## Source: ossf-package-analysis (cb4e0efafa3bf0645819f2aa88cfdc7778f938470c0984afc5e1f1504df982aa) The OpenSSF Package Analysis project identified 'melio-platform-api-client' @ 5.0.0 (rubygems) as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity.
MAL-2024-7834
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: osv:MAL-2024-7834
melio-platform-api-client
Source reference: /affected/0/package/name
- Affected versions
- 5.0.0
Source reference:
/affected/0/versions3.0.1Source reference:
/affected/0/versions3.1.1Source reference:
/affected/0/versions3.1.2Source reference:
/affected/0/versions3.1.4Source reference:
/affected/0/versions4.4.4Source reference:
/affected/0/versions4.4.5Source reference:
/affected/0/versions4.4.6Source reference:
/affected/0/versions5.0.1Source reference:
/affected/0/versions - Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Structured affected-version data
Original package identities and version rules from this source.
[
{
"package": {
"name": "melio-platform-api-client",
"purl": "pkg:gem/melio-platform-api-client",
"ecosystem": "RubyGems"
},
"versions": [
"5.0.0",
"3.0.1",
"3.1.1",
"3.1.2",
"3.1.4",
"4.4.4",
"4.4.5",
"4.4.6",
"5.0.1"
],
"database_specific": {
"source": "https://github.com/ossf/malicious-packages/blob/main/osv/malicious/rubygems/melio-platform-api-client/MAL-2024-7834.json"
}
}
]Publisher severity
No explicit severity was provided.
- Event
- #6895 · Revision 1
- Added to Heist Feed
- Publisher date