{"schema_version":"1","data":[{"id":10160,"advisory_id":"8f7d63ff-0f9f-49f8-b789-569a708f827e","revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MAL-2026-8879","source_published_at":"2026-07-07T12:04:50+00:00","published_at":"2026-10-24T23:29:05.604302+00:00","extraction_method":"structured","technologies":["core-osv","sprox-c160-3fossil"],"cve_ids":[],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Malicious code in sprox-c160-3fossil (RubyGems)","summary":"--- _-= Per source details. Do not edit below this line.=-_","evidence":"osv:MAL-2026-8879","products":[{"name":{"value":"sprox-c160-3fossil","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[{"value":"0.0.1","evidence":"/affected/0/versions"}]}],"severity":"unknown","structured":{"id":"MAL-2026-8879","aliases":["GHSA-8wg6-fqqx-q262","MAL-2026-8879"],"affected":[{"package":{"name":"sprox-c160-3fossil","purl":"pkg:gem/sprox-c160-3fossil","ecosystem":"RubyGems"},"versions":["0.0.1"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/rubygems/sprox-c160-3fossil/MAL-2026-8879.json"}}],"modified":"2026-09-24T09:02:47.741863322Z","provider":"osv","references":["https://github.com/advisories/GHSA-8wg6-fqqx-q262"],"provider_metadata":{"malicious-packages-origins":[{"id":"RLMA-2026-03530","sha256":"4c6e13dd6a8164f9f55314ce276ceccc30a76eed471026d7c8c9c8c24327b20e","source":"reversing-labs","versions":["0.0.1"],"import_time":"2026-07-09T09:14:03.851434455Z","modified_time":"2026-07-07T12:04:50Z"},{"id":"RLUA-2026-09436","sha256":"4ff86ec8bd6332d222f9d28be6152e13a379d5b614289e715a7de090ae1d5caa","source":"reversing-labs","import_time":"2026-09-24T08:49:15.145898139Z","modified_time":"2026-09-22T16:43:36Z"}]}},"related_cves":[],"security_relevant":true,"severity_evidence":null}},{"id":10159,"advisory_id":"753fa620-a2c0-4c1e-ab96-cb2420ca8217","revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MAL-2026-8903","source_published_at":"2026-07-07T12:05:05+00:00","published_at":"2026-10-24T23:29:05.051099+00:00","extraction_method":"structured","technologies":["core-osv","std5805a"],"cve_ids":[],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Malicious code in std5805a (RubyGems)","summary":"--- _-= Per source details. Do not edit below this line.=-_","evidence":"osv:MAL-2026-8903","products":[{"name":{"value":"std5805a","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[{"value":"0.0.1","evidence":"/affected/0/versions"}]}],"severity":"unknown","structured":{"id":"MAL-2026-8903","aliases":["GHSA-rq69-4x27-cg4c","MAL-2026-8903"],"affected":[{"package":{"name":"std5805a","purl":"pkg:gem/std5805a","ecosystem":"RubyGems"},"versions":["0.0.1"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/rubygems/std5805a/MAL-2026-8903.json"}}],"modified":"2026-09-24T09:02:47.738610209Z","provider":"osv","references":["https://github.com/advisories/GHSA-rq69-4x27-cg4c"],"provider_metadata":{"malicious-packages-origins":[{"id":"RLMA-2026-03554","sha256":"8c606228a710d6d31c83a9ca6b61a40402313f9130aa4e08949703fea11e5f1c","source":"reversing-labs","versions":["0.0.1"],"import_time":"2026-07-09T09:14:05.785227311Z","modified_time":"2026-07-07T12:05:05Z"},{"id":"RLUA-2026-09463","sha256":"3d1b4793edda807393181e1f28f3278d9508e528cae003d333822ab4f926a425","source":"reversing-labs","import_time":"2026-09-24T08:49:17.41237761Z","modified_time":"2026-09-22T16:43:57Z"}]}},"related_cves":[],"security_relevant":true,"severity_evidence":null}},{"id":10158,"advisory_id":"1f5d17db-18c8-4c22-bebb-d298710f58bf","revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MAL-2026-8878","source_published_at":"2026-07-07T12:04:49+00:00","published_at":"2026-10-24T23:29:04.460834+00:00","extraction_method":"structured","technologies":["core-osv","sprox-c160-3bzr"],"cve_ids":[],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Malicious code in sprox-c160-3bzr (RubyGems)","summary":"--- _-= Per source details. Do not edit below this line.=-_","evidence":"osv:MAL-2026-8878","products":[{"name":{"value":"sprox-c160-3bzr","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[{"value":"0.0.1","evidence":"/affected/0/versions"}]}],"severity":"unknown","structured":{"id":"MAL-2026-8878","aliases":["GHSA-f3mw-h3jr-8vh3","MAL-2026-8878"],"affected":[{"package":{"name":"sprox-c160-3bzr","purl":"pkg:gem/sprox-c160-3bzr","ecosystem":"RubyGems"},"versions":["0.0.1"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/rubygems/sprox-c160-3bzr/MAL-2026-8878.json"}}],"modified":"2026-09-24T09:02:47.725239046Z","provider":"osv","references":["https://github.com/advisories/GHSA-f3mw-h3jr-8vh3"],"provider_metadata":{"malicious-packages-origins":[{"id":"RLMA-2026-03529","sha256":"17723ebae2cd7b276801da8df0e62985c0e90f947b8c246ecf8d245b06da6321","source":"reversing-labs","versions":["0.0.1"],"import_time":"2026-07-09T09:14:03.78008449Z","modified_time":"2026-07-07T12:04:49Z"},{"id":"RLUA-2026-09435","sha256":"4195a498286cfa40bf12078c5ed3099dbcc2489c29ae123912b109db7c6be4a1","source":"reversing-labs","import_time":"2026-09-24T08:49:15.069172165Z","modified_time":"2026-09-22T16:43:35Z"}]}},"related_cves":[],"security_relevant":true,"severity_evidence":null}},{"id":10157,"advisory_id":"5a740739-7a70-4eaa-bb6d-e6820571afb5","revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MAL-2026-8891","source_published_at":"2026-07-07T12:04:57+00:00","published_at":"2026-10-24T23:29:03.854774+00:00","extraction_method":"structured","technologies":["core-osv","sproxytestfossilone"],"cve_ids":[],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Malicious code in sproxytestfossilone (RubyGems)","summary":"--- _-= Per source details. Do not edit below this line.=-_","evidence":"osv:MAL-2026-8891","products":[{"name":{"value":"sproxytestfossilone","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[{"value":"0.0.1","evidence":"/affected/0/versions"}]}],"severity":"unknown","structured":{"id":"MAL-2026-8891","aliases":["GHSA-f68c-qmr7-m588","MAL-2026-8891"],"affected":[{"package":{"name":"sproxytestfossilone","purl":"pkg:gem/sproxytestfossilone","ecosystem":"RubyGems"},"versions":["0.0.1"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/rubygems/sproxytestfossilone/MAL-2026-8891.json"}}],"modified":"2026-09-24T09:02:47.729453885Z","provider":"osv","references":["https://github.com/advisories/GHSA-f68c-qmr7-m588"],"provider_metadata":{"malicious-packages-origins":[{"id":"RLMA-2026-03542","sha256":"10c9dd6ae124a3f2d061a0c180f558616a3eb37b6f6a359df6882ca5775533b4","source":"reversing-labs","versions":["0.0.1"],"import_time":"2026-07-09T09:14:04.821974938Z","modified_time":"2026-07-07T12:04:57Z"},{"id":"RLUA-2026-09448","sha256":"4af43b3fbdeaebc9b24ba1287dc6b1a8c05b1c0871082f731184a475be873d72","source":"reversing-labs","import_time":"2026-09-24T08:49:16.20747792Z","modified_time":"2026-09-22T16:43:45Z"}]}},"related_cves":[],"security_relevant":true,"severity_evidence":null}},{"id":10156,"advisory_id":"27d3a5ef-f3e4-4c22-8f44-12564fbbe372","revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MAL-2026-8907","source_published_at":"2026-07-07T12:05:08+00:00","published_at":"2026-10-24T23:29:03.212824+00:00","extraction_method":"structured","technologies":["core-osv","swa8249foss"],"cve_ids":[],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Malicious code in swa8249foss (RubyGems)","summary":"--- _-= Per source details. Do not edit below this line.=-_","evidence":"osv:MAL-2026-8907","products":[{"name":{"value":"swa8249foss","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[{"value":"0.0.1","evidence":"/affected/0/versions"}]}],"severity":"unknown","structured":{"id":"MAL-2026-8907","aliases":["GHSA-9v8w-fh5c-4443","MAL-2026-8907"],"affected":[{"package":{"name":"swa8249foss","purl":"pkg:gem/swa8249foss","ecosystem":"RubyGems"},"versions":["0.0.1"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/rubygems/swa8249foss/MAL-2026-8907.json"}}],"modified":"2026-09-24T09:02:47.720048447Z","provider":"osv","references":["https://github.com/advisories/GHSA-9v8w-fh5c-4443"],"provider_metadata":{"malicious-packages-origins":[{"id":"RLMA-2026-03558","sha256":"3f4343160020850c7b681dcdfce267054f970e64a0a57fa0728c78d6a2940a9e","source":"reversing-labs","versions":["0.0.1"],"import_time":"2026-07-09T09:14:06.216571615Z","modified_time":"2026-07-07T12:05:08Z"},{"id":"RLUA-2026-09471","sha256":"58cba725fe11b89ec1c12c6cfbac449bef2b56e88f0e0a267646afe259c7df26","source":"reversing-labs","import_time":"2026-09-24T08:49:18.03343882Z","modified_time":"2026-09-22T16:44:03Z"}]}},"related_cves":[],"security_relevant":true,"severity_evidence":null}},{"id":10155,"advisory_id":"a6bd613a-219e-49fb-87fb-5717fb1eb3cd","revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MAL-2026-8870","source_published_at":"2026-07-07T12:04:44+00:00","published_at":"2026-10-24T23:29:02.625499+00:00","extraction_method":"structured","technologies":["core-osv","sprox-c160-1mod"],"cve_ids":[],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Malicious code in sprox-c160-1mod (RubyGems)","summary":"--- _-= Per source details. Do not edit below this line.=-_","evidence":"osv:MAL-2026-8870","products":[{"name":{"value":"sprox-c160-1mod","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[{"value":"0.0.1","evidence":"/affected/0/versions"}]}],"severity":"unknown","structured":{"id":"MAL-2026-8870","aliases":["GHSA-vgc4-vqv5-j7jq","MAL-2026-8870"],"affected":[{"package":{"name":"sprox-c160-1mod","purl":"pkg:gem/sprox-c160-1mod","ecosystem":"RubyGems"},"versions":["0.0.1"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/rubygems/sprox-c160-1mod/MAL-2026-8870.json"}}],"modified":"2026-09-24T09:02:47.723724078Z","provider":"osv","references":["https://github.com/advisories/GHSA-vgc4-vqv5-j7jq"],"provider_metadata":{"malicious-packages-origins":[{"id":"RLMA-2026-03521","sha256":"e2d72dfa137a53fc86d250e4883be5a5d7a6c7c8b9ab1717fb57845dc46b3e8c","source":"reversing-labs","versions":["0.0.1"],"import_time":"2026-07-09T09:14:03.09194917Z","modified_time":"2026-07-07T12:04:44Z"},{"id":"RLUA-2026-09427","sha256":"cf7ab743c4fa5de9ea3102ef182df90535c63c3a5b6749e8914ca07b8675b726","source":"reversing-labs","import_time":"2026-09-24T08:49:14.445340328Z","modified_time":"2026-09-22T16:43:29Z"}]}},"related_cves":[],"security_relevant":true,"severity_evidence":null}},{"id":10154,"advisory_id":"2d92c5a0-e0ba-4c58-8276-844b197c05ac","revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MAL-2026-1923","source_published_at":"2026-03-18T12:22:01+00:00","published_at":"2026-10-24T23:29:02.029772+00:00","extraction_method":"structured","technologies":["core-osv","sq-minimal-feature-flags"],"cve_ids":[],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Malicious code in sq-minimal-feature-flags (RubyGems)","summary":"--- _-= Per source details. Do not edit below this line.=-_","evidence":"osv:MAL-2026-1923","products":[{"name":{"value":"sq-minimal-feature-flags","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[{"value":"13.6.2","evidence":"/affected/0/versions"}]}],"severity":"unknown","structured":{"id":"MAL-2026-1923","aliases":["GHSA-c4ww-pjrh-jvhp","MAL-2026-1923"],"affected":[{"package":{"name":"sq-minimal-feature-flags","purl":"pkg:gem/sq-minimal-feature-flags","ecosystem":"RubyGems"},"versions":["13.6.2"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/rubygems/sq-minimal-feature-flags/MAL-2026-1923.json"}}],"modified":"2026-09-24T09:02:47.700833Z","provider":"osv","references":["https://github.com/advisories/GHSA-c4ww-pjrh-jvhp"],"provider_metadata":{"malicious-packages-origins":[{"id":"RLMA-2026-00959","sha256":"033acd335b9da4a1f244289cbe75f649039fafda24aaef0476bad6a201d7a9c3","source":"reversing-labs","versions":["13.6.2"],"import_time":"2026-03-19T12:18:21.382790248Z","modified_time":"2026-03-18T12:22:01Z"},{"id":"RLUA-2026-09454","sha256":"e7228b633d66e264bbdc011ea0f97cbc3dcd862c81ef264637b8459e668e65b4","source":"reversing-labs","import_time":"2026-09-24T08:49:16.709591867Z","modified_time":"2026-09-22T16:43:49Z"}]}},"related_cves":[],"security_relevant":true,"severity_evidence":null}},{"id":10153,"advisory_id":"81faa90c-d17e-490d-897b-f610156d3485","revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MAL-2026-8888","source_published_at":"2026-07-07T12:04:56+00:00","published_at":"2026-10-24T23:29:01.438528+00:00","extraction_method":"structured","technologies":["core-osv","sprox-c160-4mod"],"cve_ids":[],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Malicious code in sprox-c160-4mod (RubyGems)","summary":"--- _-= Per source details. Do not edit below this line.=-_","evidence":"osv:MAL-2026-8888","products":[{"name":{"value":"sprox-c160-4mod","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[{"value":"0.0.1","evidence":"/affected/0/versions"}]}],"severity":"unknown","structured":{"id":"MAL-2026-8888","aliases":["GHSA-3q7x-h477-hr92","MAL-2026-8888"],"affected":[{"package":{"name":"sprox-c160-4mod","purl":"pkg:gem/sprox-c160-4mod","ecosystem":"RubyGems"},"versions":["0.0.1"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/rubygems/sprox-c160-4mod/MAL-2026-8888.json"}}],"modified":"2026-09-24T09:02:47.714368930Z","provider":"osv","references":["https://github.com/advisories/GHSA-3q7x-h477-hr92"],"provider_metadata":{"malicious-packages-origins":[{"id":"RLMA-2026-03539","sha256":"d9340c26400bc650c1ce5f77c83902883ad99bde9874b0cacea75e750275da99","source":"reversing-labs","versions":["0.0.1"],"import_time":"2026-07-09T09:14:04.608216457Z","modified_time":"2026-07-07T12:04:56Z"},{"id":"RLUA-2026-09445","sha256":"07879cdf787f0bfa8379512a67930a6c410f500bb5ec54509c404d29570228b9","source":"reversing-labs","import_time":"2026-09-24T08:49:15.837390352Z","modified_time":"2026-09-22T16:43:43Z"}]}},"related_cves":[],"security_relevant":true,"severity_evidence":null}},{"id":10152,"advisory_id":"bd1daff4-86f0-459d-a7d5-024f443cb8ce","revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MAL-2025-192919","source_published_at":"2025-12-23T08:41:10+00:00","published_at":"2026-10-24T23:29:00.848491+00:00","extraction_method":"structured","technologies":["core-osv","sq-samsa"],"cve_ids":[],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Malicious code in sq-samsa (RubyGems)","summary":"--- _-= Per source details. Do not edit below this line.=-_","evidence":"osv:MAL-2025-192919","products":[{"name":{"value":"sq-samsa","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[{"value":"12.3.1","evidence":"/affected/0/versions"}]}],"severity":"unknown","structured":{"id":"MAL-2025-192919","aliases":["GHSA-69j9-f8qf-87xw","MAL-2025-192919"],"affected":[{"package":{"name":"sq-samsa","purl":"pkg:gem/sq-samsa","ecosystem":"RubyGems"},"versions":["12.3.1"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/rubygems/sq-samsa/MAL-2025-192919.json"}}],"modified":"2026-09-24T09:02:47.709722985Z","provider":"osv","references":["https://github.com/advisories/GHSA-69j9-f8qf-87xw"],"provider_metadata":{"malicious-packages-origins":[{"id":"RLMA-2025-06629","sha256":"747b2859bfd1e44a4a4e80a7245bc80a14175bf4931d0997b53da9dca3f7aa07","source":"reversing-labs","versions":["12.3.1"],"import_time":"2025-12-24T10:07:32.872503332Z","modified_time":"2025-12-23T08:41:10Z"},{"id":"RLUA-2026-09455","sha256":"fb3c7a6aced2263e163ef1e6fbd5d9caf3a49bddb6cf983943c22274682232de","source":"reversing-labs","import_time":"2026-09-24T08:49:16.790830665Z","modified_time":"2026-09-22T16:43:50Z"}]}},"related_cves":[],"security_relevant":true,"severity_evidence":null}},{"id":10151,"advisory_id":"527d8e6d-6a28-4ac0-9dca-664ba6efd2a9","revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MAL-2026-8874","source_published_at":"2026-07-07T12:04:46+00:00","published_at":"2026-10-24T23:29:00.236665+00:00","extraction_method":"structured","technologies":["core-osv","sprox-c160-2git"],"cve_ids":[],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Malicious code in sprox-c160-2git (RubyGems)","summary":"--- _-= Per source details. Do not edit below this line.=-_","evidence":"osv:MAL-2026-8874","products":[{"name":{"value":"sprox-c160-2git","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[{"value":"0.0.1","evidence":"/affected/0/versions"}]}],"severity":"unknown","structured":{"id":"MAL-2026-8874","aliases":["GHSA-vgqm-cvwv-38gm","MAL-2026-8874"],"affected":[{"package":{"name":"sprox-c160-2git","purl":"pkg:gem/sprox-c160-2git","ecosystem":"RubyGems"},"versions":["0.0.1"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/rubygems/sprox-c160-2git/MAL-2026-8874.json"}}],"modified":"2026-09-24T09:02:47.682492226Z","provider":"osv","references":["https://github.com/advisories/GHSA-vgqm-cvwv-38gm"],"provider_metadata":{"malicious-packages-origins":[{"id":"RLMA-2026-03525","sha256":"010c95691307c91590460c1ac9497bcec10336ea65f26bc17ce52a2e38c70bff","source":"reversing-labs","versions":["0.0.1"],"import_time":"2026-07-09T09:14:03.415629326Z","modified_time":"2026-07-07T12:04:46Z"},{"id":"RLUA-2026-09431","sha256":"97c10da589243ca0940119c099a185c12e27b01d1ecad7799b1c19ee021c0ed3","source":"reversing-labs","import_time":"2026-09-24T08:49:14.746423732Z","modified_time":"2026-09-22T16:43:32Z"}]}},"related_cves":[],"security_relevant":true,"severity_evidence":null}},{"id":10150,"advisory_id":"74eb009b-a46a-4f62-931d-03ad635fa0ff","revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MAL-2026-8887","source_published_at":"2026-07-07T12:04:55+00:00","published_at":"2026-10-24T23:28:59.591368+00:00","extraction_method":"structured","technologies":["core-osv","sprox-c160-4hg"],"cve_ids":[],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Malicious code in sprox-c160-4hg (RubyGems)","summary":"--- _-= Per source details. Do not edit below this line.=-_","evidence":"osv:MAL-2026-8887","products":[{"name":{"value":"sprox-c160-4hg","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[{"value":"0.0.1","evidence":"/affected/0/versions"}]}],"severity":"unknown","structured":{"id":"MAL-2026-8887","aliases":["GHSA-w3v4-24f9-3rj8","MAL-2026-8887"],"affected":[{"package":{"name":"sprox-c160-4hg","purl":"pkg:gem/sprox-c160-4hg","ecosystem":"RubyGems"},"versions":["0.0.1"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/rubygems/sprox-c160-4hg/MAL-2026-8887.json"}}],"modified":"2026-09-24T09:02:47.670048682Z","provider":"osv","references":["https://github.com/advisories/GHSA-w3v4-24f9-3rj8"],"provider_metadata":{"malicious-packages-origins":[{"id":"RLMA-2026-03538","sha256":"6184ef7c53b6973c915a1cf458e09af7143a56a8697ee1fe6473f56ffaaadae8","source":"reversing-labs","versions":["0.0.1"],"import_time":"2026-07-09T09:14:04.533727361Z","modified_time":"2026-07-07T12:04:55Z"},{"id":"RLUA-2026-09444","sha256":"8f651592abda9f8462c88f2249598aeac2e720f1f3f2fc41d545c1cb8afd596e","source":"reversing-labs","import_time":"2026-09-24T08:49:15.761612755Z","modified_time":"2026-09-22T16:43:43Z"}]}},"related_cves":[],"security_relevant":true,"severity_evidence":null}},{"id":10149,"advisory_id":"7b66563e-6a61-4e78-89f6-560d635eab6f","revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MAL-2026-8876","source_published_at":"2026-07-07T12:04:47+00:00","published_at":"2026-10-24T23:28:59.022109+00:00","extraction_method":"structured","technologies":["core-osv","sprox-c160-2mod"],"cve_ids":[],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Malicious code in sprox-c160-2mod (RubyGems)","summary":"--- _-= Per source details. Do not edit below this line.=-_","evidence":"osv:MAL-2026-8876","products":[{"name":{"value":"sprox-c160-2mod","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[{"value":"0.0.1","evidence":"/affected/0/versions"}]}],"severity":"unknown","structured":{"id":"MAL-2026-8876","aliases":["GHSA-7grc-3993-fgf9","MAL-2026-8876"],"affected":[{"package":{"name":"sprox-c160-2mod","purl":"pkg:gem/sprox-c160-2mod","ecosystem":"RubyGems"},"versions":["0.0.1"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/rubygems/sprox-c160-2mod/MAL-2026-8876.json"}}],"modified":"2026-09-24T09:02:47.645070825Z","provider":"osv","references":["https://github.com/advisories/GHSA-7grc-3993-fgf9"],"provider_metadata":{"malicious-packages-origins":[{"id":"RLMA-2026-03527","sha256":"f9d8fc9cfe5df56a9bf01469d604a7a8acb63aa76c8801d9aff36b7f7552814d","source":"reversing-labs","versions":["0.0.1"],"import_time":"2026-07-09T09:14:03.607644331Z","modified_time":"2026-07-07T12:04:47Z"},{"id":"RLUA-2026-09433","sha256":"049fe318c7fa7ca3477a3910fd8edd55149b28ba690a676b50ffcff12ffcdae4","source":"reversing-labs","import_time":"2026-09-24T08:49:14.904780216Z","modified_time":"2026-09-22T16:43:33Z"}]}},"related_cves":[],"security_relevant":true,"severity_evidence":null}},{"id":10148,"advisory_id":"e7c5cbe9-c24e-493b-9e2f-972fc1c54975","revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MAL-2026-8893","source_published_at":"2026-07-07T12:04:58+00:00","published_at":"2026-10-24T23:28:58.403916+00:00","extraction_method":"structured","technologies":["core-osv","sproxytesthgone"],"cve_ids":[],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Malicious code in sproxytesthgone (RubyGems)","summary":"--- _-= Per source details. Do not edit below this line.=-_","evidence":"osv:MAL-2026-8893","products":[{"name":{"value":"sproxytesthgone","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[{"value":"0.0.1","evidence":"/affected/0/versions"}]}],"severity":"unknown","structured":{"id":"MAL-2026-8893","aliases":["GHSA-343m-mf53-fjvq","MAL-2026-8893"],"affected":[{"package":{"name":"sproxytesthgone","purl":"pkg:gem/sproxytesthgone","ecosystem":"RubyGems"},"versions":["0.0.1"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/rubygems/sproxytesthgone/MAL-2026-8893.json"}}],"modified":"2026-09-24T09:02:47.636240573Z","provider":"osv","references":["https://github.com/advisories/GHSA-343m-mf53-fjvq"],"provider_metadata":{"malicious-packages-origins":[{"id":"RLMA-2026-03544","sha256":"8af0cf005b9d5a7fc4ce886ea166e7365959c6932e90c9e730e3068826c4b7b6","source":"reversing-labs","versions":["0.0.1"],"import_time":"2026-07-09T09:14:04.947924805Z","modified_time":"2026-07-07T12:04:58Z"},{"id":"RLUA-2026-09450","sha256":"ed56dcbafc6a808018ef020ba291249c86deb60b0cf9bf3d292213377a68758c","source":"reversing-labs","import_time":"2026-09-24T08:49:16.370187234Z","modified_time":"2026-09-22T16:43:47Z"}]}},"related_cves":[],"security_relevant":true,"severity_evidence":null}},{"id":10147,"advisory_id":"03dc8b14-61c1-48a0-af37-cc00f9ae1f1a","revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MAL-2026-8897","source_published_at":"2026-07-07T12:05:01+00:00","published_at":"2026-10-24T23:28:57.836052+00:00","extraction_method":"structured","technologies":["core-osv","st126006"],"cve_ids":[],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Malicious code in st126006 (RubyGems)","summary":"--- _-= Per source details. Do not edit below this line.=-_","evidence":"osv:MAL-2026-8897","products":[{"name":{"value":"st126006","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[{"value":"0.0.1","evidence":"/affected/0/versions"}]}],"severity":"unknown","structured":{"id":"MAL-2026-8897","aliases":["GHSA-wh6w-h94p-gfxc","MAL-2026-8897"],"affected":[{"package":{"name":"st126006","purl":"pkg:gem/st126006","ecosystem":"RubyGems"},"versions":["0.0.1"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/rubygems/st126006/MAL-2026-8897.json"}}],"modified":"2026-09-24T09:02:47.603655921Z","provider":"osv","references":["https://github.com/advisories/GHSA-wh6w-h94p-gfxc"],"provider_metadata":{"malicious-packages-origins":[{"id":"RLMA-2026-03548","sha256":"c254c94b7f45899d4b4bae79e349d8669835bcba8ac89b7b131a48b15a185aa2","source":"reversing-labs","versions":["0.0.1"],"import_time":"2026-07-09T09:14:05.26467059Z","modified_time":"2026-07-07T12:05:01Z"},{"id":"RLUA-2026-09457","sha256":"f75009acbf2cb4e0e7f2e8da89c55a977958b08d1cf7660b265521e20a4c384a","source":"reversing-labs","import_time":"2026-09-24T08:49:16.948927286Z","modified_time":"2026-09-22T16:43:52Z"}]}},"related_cves":[],"security_relevant":true,"severity_evidence":null}},{"id":10146,"advisory_id":"07478664-b2a0-4bc8-8ac4-d3c904142f9f","revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MAL-2026-8871","source_published_at":"2026-07-07T12:04:44+00:00","published_at":"2026-10-24T23:28:57.26246+00:00","extraction_method":"structured","technologies":["core-osv","sprox-c160-1svn"],"cve_ids":[],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Malicious code in sprox-c160-1svn (RubyGems)","summary":"--- _-= Per source details. Do not edit below this line.=-_","evidence":"osv:MAL-2026-8871","products":[{"name":{"value":"sprox-c160-1svn","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[{"value":"0.0.1","evidence":"/affected/0/versions"}]}],"severity":"unknown","structured":{"id":"MAL-2026-8871","aliases":["GHSA-8mcx-cfw2-wvqx","MAL-2026-8871"],"affected":[{"package":{"name":"sprox-c160-1svn","purl":"pkg:gem/sprox-c160-1svn","ecosystem":"RubyGems"},"versions":["0.0.1"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/rubygems/sprox-c160-1svn/MAL-2026-8871.json"}}],"modified":"2026-09-24T09:02:47.586109787Z","provider":"osv","references":["https://github.com/advisories/GHSA-8mcx-cfw2-wvqx"],"provider_metadata":{"malicious-packages-origins":[{"id":"RLMA-2026-03522","sha256":"77033f7aea762fcda190cb6e16f2308c707a0277d269d04bfef2c3cb02afc9c6","source":"reversing-labs","versions":["0.0.1"],"import_time":"2026-07-09T09:14:03.170215797Z","modified_time":"2026-07-07T12:04:44Z"},{"id":"RLUA-2026-09428","sha256":"952f298549fd6a6294ab51e1f5ac07ad701d4befdf279184668719f7194337e9","source":"reversing-labs","import_time":"2026-09-24T08:49:14.519361387Z","modified_time":"2026-09-22T16:43:29Z"}]}},"related_cves":[],"security_relevant":true,"severity_evidence":null}},{"id":10145,"advisory_id":"6e469e8b-2c50-4dfe-86bc-8487f1e0bfba","revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MAL-2026-8807","source_published_at":"2026-07-07T12:04:05+00:00","published_at":"2026-10-24T23:28:56.674213+00:00","extraction_method":"structured","technologies":["core-osv","sm8235yapr"],"cve_ids":[],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Malicious code in sm8235yapr (RubyGems)","summary":"--- _-= Per source details. Do not edit below this line.=-_","evidence":"osv:MAL-2026-8807","products":[{"name":{"value":"sm8235yapr","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[{"value":"0.0.1","evidence":"/affected/0/versions"}]}],"severity":"unknown","structured":{"id":"MAL-2026-8807","aliases":["GHSA-j9mc-pxw4-cvhv","MAL-2026-8807"],"affected":[{"package":{"name":"sm8235yapr","purl":"pkg:gem/sm8235yapr","ecosystem":"RubyGems"},"versions":["0.0.1"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/rubygems/sm8235yapr/MAL-2026-8807.json"}}],"modified":"2026-09-24T09:02:47.570915937Z","provider":"osv","references":["https://github.com/advisories/GHSA-j9mc-pxw4-cvhv"],"provider_metadata":{"malicious-packages-origins":[{"id":"RLMA-2026-03458","sha256":"d09aa432ab0473148cd3bea95d495e221a23640fbbdd2abc2ce772c31ea86511","source":"reversing-labs","versions":["0.0.1"],"import_time":"2026-07-09T09:13:57.171461108Z","modified_time":"2026-07-07T12:04:05Z"},{"id":"RLUA-2026-09356","sha256":"c6257a5b13e36f4da6afdc95d52726f6b8b014b65f12787abe7cb257e68fc8f9","source":"reversing-labs","import_time":"2026-09-24T08:49:08.682098178Z","modified_time":"2026-09-22T16:42:35Z"}]}},"related_cves":[],"security_relevant":true,"severity_evidence":null}},{"id":10144,"advisory_id":"948a99aa-66b2-4fb7-847b-81ad27a2c22d","revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MAL-2026-8779","source_published_at":"2026-07-07T12:03:46+00:00","published_at":"2026-10-24T23:28:56.108312+00:00","extraction_method":"structured","technologies":["core-osv","slt27395"],"cve_ids":[],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Malicious code in slt27395 (RubyGems)","summary":"--- _-= Per source details. Do not edit below this line.=-_","evidence":"osv:MAL-2026-8779","products":[{"name":{"value":"slt27395","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[{"value":"0.0.2","evidence":"/affected/0/versions"}]}],"severity":"unknown","structured":{"id":"MAL-2026-8779","aliases":["GHSA-mj69-7g62-4cg3","MAL-2026-8779"],"affected":[{"package":{"name":"slt27395","purl":"pkg:gem/slt27395","ecosystem":"RubyGems"},"versions":["0.0.2"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/rubygems/slt27395/MAL-2026-8779.json"}}],"modified":"2026-09-24T09:02:47.571101798Z","provider":"osv","references":["https://github.com/advisories/GHSA-mj69-7g62-4cg3"],"provider_metadata":{"malicious-packages-origins":[{"id":"RLMA-2026-03430","sha256":"f84b044bf304f6284de56c4e5573b7ef0b78069485e42760fddb15b5480ce2e4","source":"reversing-labs","versions":["0.0.2"],"import_time":"2026-07-09T09:13:54.015594989Z","modified_time":"2026-07-07T12:03:46Z"},{"id":"RLUA-2026-09328","sha256":"4a02866bff8bff54c62999026cc29551a93c15d3b9abd751e704937a7928027e","source":"reversing-labs","import_time":"2026-09-24T08:49:06.407888015Z","modified_time":"2026-09-22T16:42:12Z"}]}},"related_cves":[],"security_relevant":true,"severity_evidence":null}},{"id":10143,"advisory_id":"e2f10115-0689-40dc-946d-5792ca93d919","revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MAL-2026-8895","source_published_at":"2026-07-07T12:04:59+00:00","published_at":"2026-10-24T23:28:55.524284+00:00","extraction_method":"structured","technologies":["core-osv","sproxytestsvnone"],"cve_ids":[],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Malicious code in sproxytestsvnone (RubyGems)","summary":"--- _-= Per source details. Do not edit below this line.=-_","evidence":"osv:MAL-2026-8895","products":[{"name":{"value":"sproxytestsvnone","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[{"value":"0.0.1","evidence":"/affected/0/versions"}]}],"severity":"unknown","structured":{"id":"MAL-2026-8895","aliases":["GHSA-hvxj-r4mw-h3v6","MAL-2026-8895"],"affected":[{"package":{"name":"sproxytestsvnone","purl":"pkg:gem/sproxytestsvnone","ecosystem":"RubyGems"},"versions":["0.0.1"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/rubygems/sproxytestsvnone/MAL-2026-8895.json"}}],"modified":"2026-09-24T09:02:47.568800602Z","provider":"osv","references":["https://github.com/advisories/GHSA-hvxj-r4mw-h3v6"],"provider_metadata":{"malicious-packages-origins":[{"id":"RLMA-2026-03546","sha256":"9d0c522d02f443666015397a38b69451e0836e0566551778f6b6def72653b41e","source":"reversing-labs","versions":["0.0.1"],"import_time":"2026-07-09T09:14:05.103291824Z","modified_time":"2026-07-07T12:04:59Z"},{"id":"RLUA-2026-09452","sha256":"b8420a1e7b73af35ef71575b2b2cc161c82f79dc728864eebc29c6241a5eac3a","source":"reversing-labs","import_time":"2026-09-24T08:49:16.530054119Z","modified_time":"2026-09-22T16:43:48Z"}]}},"related_cves":[],"security_relevant":true,"severity_evidence":null}},{"id":10142,"advisory_id":"e56bffd3-7481-4f75-bfdf-117eccbf8d20","revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MAL-2026-8808","source_published_at":"2026-07-07T12:04:06+00:00","published_at":"2026-10-24T23:28:54.885939+00:00","extraction_method":"structured","technologies":["core-osv","sm8240rjol"],"cve_ids":[],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Malicious code in sm8240rjol (RubyGems)","summary":"--- _-= Per source details. Do not edit below this line.=-_","evidence":"osv:MAL-2026-8808","products":[{"name":{"value":"sm8240rjol","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[{"value":"0.0.1","evidence":"/affected/0/versions"}]}],"severity":"unknown","structured":{"id":"MAL-2026-8808","aliases":["GHSA-pfh7-gf6q-w6c8","MAL-2026-8808"],"affected":[{"package":{"name":"sm8240rjol","purl":"pkg:gem/sm8240rjol","ecosystem":"RubyGems"},"versions":["0.0.1"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/rubygems/sm8240rjol/MAL-2026-8808.json"}}],"modified":"2026-09-24T09:02:47.497448635Z","provider":"osv","references":["https://github.com/advisories/GHSA-pfh7-gf6q-w6c8"],"provider_metadata":{"malicious-packages-origins":[{"id":"RLMA-2026-03459","sha256":"69b1942bc1566ba02eafab4c3aa3e1c0c34d2f31d6bc7c3d50c5ea2147a2e630","source":"reversing-labs","versions":["0.0.1"],"import_time":"2026-07-09T09:13:57.254298457Z","modified_time":"2026-07-07T12:04:06Z"},{"id":"RLUA-2026-09357","sha256":"bf56a268235febd5d60a61be1bd9c03d2fe2763d7b8a8f6d0781d8caa140a92d","source":"reversing-labs","import_time":"2026-09-24T08:49:08.80082634Z","modified_time":"2026-09-22T16:42:36Z"}]}},"related_cves":[],"security_relevant":true,"severity_evidence":null}},{"id":10141,"advisory_id":"f7243548-ca91-44ed-bf64-a2ce2f9581ac","revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MAL-2026-8815","source_published_at":"2026-07-07T12:04:11+00:00","published_at":"2026-10-24T23:28:54.290881+00:00","extraction_method":"structured","technologies":["core-osv","sm8275loeo"],"cve_ids":[],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Malicious code in sm8275loeo (RubyGems)","summary":"--- _-= Per source details. Do not edit below this line.=-_","evidence":"osv:MAL-2026-8815","products":[{"name":{"value":"sm8275loeo","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[{"value":"0.0.1","evidence":"/affected/0/versions"}]}],"severity":"unknown","structured":{"id":"MAL-2026-8815","aliases":["GHSA-25rg-3g6c-2295","MAL-2026-8815"],"affected":[{"package":{"name":"sm8275loeo","purl":"pkg:gem/sm8275loeo","ecosystem":"RubyGems"},"versions":["0.0.1"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/rubygems/sm8275loeo/MAL-2026-8815.json"}}],"modified":"2026-09-24T09:02:47.496510406Z","provider":"osv","references":["https://github.com/advisories/GHSA-25rg-3g6c-2295"],"provider_metadata":{"malicious-packages-origins":[{"id":"RLMA-2026-03466","sha256":"050d07f510b13dd9a150ac4d736df9f58987a6d7f7e25c5ea0d4a6b0f1185d83","source":"reversing-labs","versions":["0.0.1"],"import_time":"2026-07-09T09:13:57.935657264Z","modified_time":"2026-07-07T12:04:11Z"},{"id":"RLUA-2026-09364","sha256":"3ee8ee15dfcf03e5a92d13b3ba65bd022c97fc719ed2607423510daa1dfd820d","source":"reversing-labs","import_time":"2026-09-24T08:49:09.364228006Z","modified_time":"2026-09-22T16:42:42Z"}]}},"related_cves":[],"security_relevant":true,"severity_evidence":null}},{"id":10140,"advisory_id":"9cd18029-4475-43aa-be37-b69c63d788d0","revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MAL-2026-8809","source_published_at":"2026-07-07T12:04:07+00:00","published_at":"2026-10-24T23:28:53.702551+00:00","extraction_method":"structured","technologies":["core-osv","sm8245fgma"],"cve_ids":[],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Malicious code in sm8245fgma (RubyGems)","summary":"--- _-= Per source details. Do not edit below this line.=-_","evidence":"osv:MAL-2026-8809","products":[{"name":{"value":"sm8245fgma","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[{"value":"0.0.1","evidence":"/affected/0/versions"}]}],"severity":"unknown","structured":{"id":"MAL-2026-8809","aliases":["GHSA-hf3v-x8vf-3jcf","MAL-2026-8809"],"affected":[{"package":{"name":"sm8245fgma","purl":"pkg:gem/sm8245fgma","ecosystem":"RubyGems"},"versions":["0.0.1"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/rubygems/sm8245fgma/MAL-2026-8809.json"}}],"modified":"2026-09-24T09:02:47.490187020Z","provider":"osv","references":["https://github.com/advisories/GHSA-hf3v-x8vf-3jcf"],"provider_metadata":{"malicious-packages-origins":[{"id":"RLMA-2026-03460","sha256":"5c2123d4d66f1385be0d15cd8bed8c33235432e58deed50faf06cbe191db47a4","source":"reversing-labs","versions":["0.0.1"],"import_time":"2026-07-09T09:13:57.342326597Z","modified_time":"2026-07-07T12:04:07Z"},{"id":"RLUA-2026-09358","sha256":"906e537634d1b696fef628b4c70b39f266be31e3b4ed6c114545e1a6e7637e51","source":"reversing-labs","import_time":"2026-09-24T08:49:08.883491022Z","modified_time":"2026-09-22T16:42:37Z"}]}},"related_cves":[],"security_relevant":true,"severity_evidence":null}},{"id":10139,"advisory_id":"64b3e67e-81d1-4d72-b045-09d4d65f0beb","revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MAL-2026-8803","source_published_at":"2026-07-07T12:04:02+00:00","published_at":"2026-10-24T23:28:53.140277+00:00","extraction_method":"structured","technologies":["core-osv","sm8215yqaa"],"cve_ids":[],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Malicious code in sm8215yqaa (RubyGems)","summary":"--- _-= Per source details. Do not edit below this line.=-_","evidence":"osv:MAL-2026-8803","products":[{"name":{"value":"sm8215yqaa","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[{"value":"0.0.1","evidence":"/affected/0/versions"}]}],"severity":"unknown","structured":{"id":"MAL-2026-8803","aliases":["GHSA-9c4v-c538-rmwv","MAL-2026-8803"],"affected":[{"package":{"name":"sm8215yqaa","purl":"pkg:gem/sm8215yqaa","ecosystem":"RubyGems"},"versions":["0.0.1"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/rubygems/sm8215yqaa/MAL-2026-8803.json"}}],"modified":"2026-09-24T09:02:47.444763491Z","provider":"osv","references":["https://github.com/advisories/GHSA-9c4v-c538-rmwv"],"provider_metadata":{"malicious-packages-origins":[{"id":"RLMA-2026-03454","sha256":"9d1e55d905924b7a4d166c13131ce613d01aaefe459e59d17aa02c1a8dff6f02","source":"reversing-labs","versions":["0.0.1"],"import_time":"2026-07-09T09:13:56.838517825Z","modified_time":"2026-07-07T12:04:02Z"},{"id":"RLUA-2026-09352","sha256":"d44ab655bec03acb701db61692b99f34403f49a2f324cc03a856f2c0e114e64b","source":"reversing-labs","import_time":"2026-09-24T08:49:08.329085086Z","modified_time":"2026-09-22T16:42:32Z"}]}},"related_cves":[],"security_relevant":true,"severity_evidence":null}},{"id":10138,"advisory_id":"e610e592-125c-4db9-89ed-38550cb21c36","revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MAL-2026-8819","source_published_at":"2026-07-07T12:04:14+00:00","published_at":"2026-10-24T23:28:52.588392+00:00","extraction_method":"structured","technologies":["core-osv","sm8295yubf"],"cve_ids":[],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Malicious code in sm8295yubf (RubyGems)","summary":"--- _-= Per source details. Do not edit below this line.=-_","evidence":"osv:MAL-2026-8819","products":[{"name":{"value":"sm8295yubf","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[{"value":"0.0.1","evidence":"/affected/0/versions"}]}],"severity":"unknown","structured":{"id":"MAL-2026-8819","aliases":["GHSA-mxjc-jx6c-4cv8","MAL-2026-8819"],"affected":[{"package":{"name":"sm8295yubf","purl":"pkg:gem/sm8295yubf","ecosystem":"RubyGems"},"versions":["0.0.1"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/rubygems/sm8295yubf/MAL-2026-8819.json"}}],"modified":"2026-09-24T09:02:47.438366582Z","provider":"osv","references":["https://github.com/advisories/GHSA-mxjc-jx6c-4cv8"],"provider_metadata":{"malicious-packages-origins":[{"id":"RLMA-2026-03470","sha256":"c7bb64d926f50c76a16a7296b00ae0b4e02afade89c6e42a0b08189c4f4a6387","source":"reversing-labs","versions":["0.0.1"],"import_time":"2026-07-09T09:13:58.316534963Z","modified_time":"2026-07-07T12:04:14Z"},{"id":"RLUA-2026-09368","sha256":"8df88ef2a4dca670d3ec3593d49487828b4f742b351021eec5f89386ba6ec573","source":"reversing-labs","import_time":"2026-09-24T08:49:09.682748737Z","modified_time":"2026-09-22T16:42:45Z"}]}},"related_cves":[],"security_relevant":true,"severity_evidence":null}},{"id":10137,"advisory_id":"1d598740-4c34-469d-8b1e-10a5e95b1e51","revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MAL-2026-8821","source_published_at":"2026-07-07T12:04:15+00:00","published_at":"2026-10-24T23:28:52.021373+00:00","extraction_method":"structured","technologies":["core-osv","southdot"],"cve_ids":[],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Malicious code in southdot (RubyGems)","summary":"--- _-= Per source details. Do not edit below this line.=-_","evidence":"osv:MAL-2026-8821","products":[{"name":{"value":"southdot","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[{"value":"0.0.1","evidence":"/affected/0/versions"}]}],"severity":"unknown","structured":{"id":"MAL-2026-8821","aliases":["GHSA-pc5r-9p53-4g4v","MAL-2026-8821"],"affected":[{"package":{"name":"southdot","purl":"pkg:gem/southdot","ecosystem":"RubyGems"},"versions":["0.0.1"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/rubygems/southdot/MAL-2026-8821.json"}}],"modified":"2026-09-24T09:02:47.437531398Z","provider":"osv","references":["https://github.com/advisories/GHSA-pc5r-9p53-4g4v"],"provider_metadata":{"malicious-packages-origins":[{"id":"RLMA-2026-03472","sha256":"f54f7669e5dedfd73c5fac335745737be3bab12e34d918dcef613bc4acb1b725","source":"reversing-labs","versions":["0.0.1"],"import_time":"2026-07-09T09:13:58.515904902Z","modified_time":"2026-07-07T12:04:15Z"},{"id":"RLUA-2026-09370","sha256":"6175f02a7f32910e1eef7f680e07b7fdcc630542c7b6dec92259b509ff1b3448","source":"reversing-labs","import_time":"2026-09-24T08:49:09.84278361Z","modified_time":"2026-09-22T16:42:47Z"}]}},"related_cves":[],"security_relevant":true,"severity_evidence":null}},{"id":10136,"advisory_id":"6a5471c8-0dac-49bc-8a59-c5fc25d202b6","revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MAL-2026-8817","source_published_at":"2026-07-07T12:04:13+00:00","published_at":"2026-10-24T23:28:51.248068+00:00","extraction_method":"structured","technologies":["core-osv","sm8285iqre"],"cve_ids":[],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Malicious code in sm8285iqre (RubyGems)","summary":"--- _-= Per source details. Do not edit below this line.=-_","evidence":"osv:MAL-2026-8817","products":[{"name":{"value":"sm8285iqre","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[{"value":"0.0.1","evidence":"/affected/0/versions"}]}],"severity":"unknown","structured":{"id":"MAL-2026-8817","aliases":["GHSA-rj7g-mxm9-5j43","MAL-2026-8817"],"affected":[{"package":{"name":"sm8285iqre","purl":"pkg:gem/sm8285iqre","ecosystem":"RubyGems"},"versions":["0.0.1"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/rubygems/sm8285iqre/MAL-2026-8817.json"}}],"modified":"2026-09-24T09:02:47.437258015Z","provider":"osv","references":["https://github.com/advisories/GHSA-rj7g-mxm9-5j43"],"provider_metadata":{"malicious-packages-origins":[{"id":"RLMA-2026-03468","sha256":"acfb494429ed15b753d70f99d627c685af8454d130cfbe32d91b7a3820c38829","source":"reversing-labs","versions":["0.0.1"],"import_time":"2026-07-09T09:13:58.105707286Z","modified_time":"2026-07-07T12:04:13Z"},{"id":"RLUA-2026-09366","sha256":"c3e74ea5cb8cd003651135e919b7d26d1be5114c1b1dcc4171821e487312c3f9","source":"reversing-labs","import_time":"2026-09-24T08:49:09.51991833Z","modified_time":"2026-09-22T16:42:44Z"}]}},"related_cves":[],"security_relevant":true,"severity_evidence":null}},{"id":10135,"advisory_id":"6b0ce70e-7b72-4a25-ad38-279451cb9bb5","revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MAL-2026-8790","source_published_at":"2026-07-07T12:03:53+00:00","published_at":"2026-10-24T23:28:50.462721+00:00","extraction_method":"structured","technologies":["core-osv","slvbzr137"],"cve_ids":[],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Malicious code in slvbzr137 (RubyGems)","summary":"--- _-= Per source details. Do not edit below this line.=-_","evidence":"osv:MAL-2026-8790","products":[{"name":{"value":"slvbzr137","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[{"value":"0.0.2","evidence":"/affected/0/versions"}]}],"severity":"unknown","structured":{"id":"MAL-2026-8790","aliases":["GHSA-pf68-fq3q-ff59","MAL-2026-8790"],"affected":[{"package":{"name":"slvbzr137","purl":"pkg:gem/slvbzr137","ecosystem":"RubyGems"},"versions":["0.0.2"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/rubygems/slvbzr137/MAL-2026-8790.json"}}],"modified":"2026-09-24T09:02:47.436679947Z","provider":"osv","references":["https://github.com/advisories/GHSA-pf68-fq3q-ff59"],"provider_metadata":{"malicious-packages-origins":[{"id":"RLMA-2026-03441","sha256":"2363de32e70f7bcee0e8df906db60e9c77bcd66f40ff90688e195619fdf49b38","source":"reversing-labs","versions":["0.0.2"],"import_time":"2026-07-09T09:13:55.250392609Z","modified_time":"2026-07-07T12:03:53Z"},{"id":"RLUA-2026-09339","sha256":"df9494ac30495e8f1e18a5408623e042630f3438042e79306187d73145715056","source":"reversing-labs","import_time":"2026-09-24T08:49:07.295685096Z","modified_time":"2026-09-22T16:42:20Z"}]}},"related_cves":[],"security_relevant":true,"severity_evidence":null}},{"id":10134,"advisory_id":"77a97c0a-bd1d-46f8-a87b-22586d163ddc","revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MAL-2026-8822","source_published_at":"2026-07-07T12:04:15+00:00","published_at":"2026-10-24T23:28:49.873465+00:00","extraction_method":"structured","technologies":["core-osv","southextractproxy2026"],"cve_ids":[],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Malicious code in southextractproxy2026 (RubyGems)","summary":"--- _-= Per source details. Do not edit below this line.=-_","evidence":"osv:MAL-2026-8822","products":[{"name":{"value":"southextractproxy2026","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[{"value":"0.0.1","evidence":"/affected/0/versions"}]}],"severity":"unknown","structured":{"id":"MAL-2026-8822","aliases":["GHSA-9gch-fjfc-4gf4","MAL-2026-8822"],"affected":[{"package":{"name":"southextractproxy2026","purl":"pkg:gem/southextractproxy2026","ecosystem":"RubyGems"},"versions":["0.0.1"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/rubygems/southextractproxy2026/MAL-2026-8822.json"}}],"modified":"2026-09-24T09:02:47.434480058Z","provider":"osv","references":["https://github.com/advisories/GHSA-9gch-fjfc-4gf4"],"provider_metadata":{"malicious-packages-origins":[{"id":"RLMA-2026-03473","sha256":"38786f0aa66a0368b72f288dd58e97ed16f69b99d507cb619e84b3de23520138","source":"reversing-labs","versions":["0.0.1"],"import_time":"2026-07-09T09:13:58.601220921Z","modified_time":"2026-07-07T12:04:15Z"},{"id":"RLUA-2026-09371","sha256":"b22aa772838da06881e5e74a9c011ed12cb07d565ea1c43bee5fbe4d795fbf85","source":"reversing-labs","import_time":"2026-09-24T08:49:09.925458691Z","modified_time":"2026-09-22T16:42:47Z"}]}},"related_cves":[],"security_relevant":true,"severity_evidence":null}},{"id":10133,"advisory_id":"cef1f352-c279-4e5d-90e6-d9548f81d84b","revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MAL-2026-8823","source_published_at":"2026-07-07T12:04:16+00:00","published_at":"2026-10-24T23:28:49.314138+00:00","extraction_method":"structured","technologies":["core-osv","southfossj356"],"cve_ids":[],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Malicious code in southfossj356 (RubyGems)","summary":"--- _-= Per source details. Do not edit below this line.=-_","evidence":"osv:MAL-2026-8823","products":[{"name":{"value":"southfossj356","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[{"value":"0.0.1","evidence":"/affected/0/versions"}]}],"severity":"unknown","structured":{"id":"MAL-2026-8823","aliases":["GHSA-rw2x-v3qq-774p","MAL-2026-8823"],"affected":[{"package":{"name":"southfossj356","purl":"pkg:gem/southfossj356","ecosystem":"RubyGems"},"versions":["0.0.1"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/rubygems/southfossj356/MAL-2026-8823.json"}}],"modified":"2026-09-24T09:02:47.433500472Z","provider":"osv","references":["https://github.com/advisories/GHSA-rw2x-v3qq-774p"],"provider_metadata":{"malicious-packages-origins":[{"id":"RLMA-2026-03474","sha256":"d5452f15407a9beda201ad150ff129852c56339e63edc7bb37fdb5226e35be29","source":"reversing-labs","versions":["0.0.1"],"import_time":"2026-07-09T09:13:58.66880716Z","modified_time":"2026-07-07T12:04:16Z"},{"id":"RLUA-2026-09372","sha256":"f175d3e2731890d66ae2190bb6df80b8027a8c6b9ea50d76e56af0bc5edec13f","source":"reversing-labs","import_time":"2026-09-24T08:49:10.005755015Z","modified_time":"2026-09-22T16:42:48Z"}]}},"related_cves":[],"security_relevant":true,"severity_evidence":null}},{"id":10132,"advisory_id":"ab5107c7-b6b4-4a29-9bf2-c0eb141e6a85","revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MAL-2026-8814","source_published_at":"2026-07-07T12:04:10+00:00","published_at":"2026-10-24T23:28:48.585245+00:00","extraction_method":"structured","technologies":["core-osv","sm8270sqhi"],"cve_ids":[],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Malicious code in sm8270sqhi (RubyGems)","summary":"--- _-= Per source details. Do not edit below this line.=-_","evidence":"osv:MAL-2026-8814","products":[{"name":{"value":"sm8270sqhi","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[{"value":"0.0.1","evidence":"/affected/0/versions"}]}],"severity":"unknown","structured":{"id":"MAL-2026-8814","aliases":["GHSA-gx2q-6wj5-q292","MAL-2026-8814"],"affected":[{"package":{"name":"sm8270sqhi","purl":"pkg:gem/sm8270sqhi","ecosystem":"RubyGems"},"versions":["0.0.1"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/rubygems/sm8270sqhi/MAL-2026-8814.json"}}],"modified":"2026-09-24T09:02:47.433863714Z","provider":"osv","references":["https://github.com/advisories/GHSA-gx2q-6wj5-q292"],"provider_metadata":{"malicious-packages-origins":[{"id":"RLMA-2026-03465","sha256":"fcd4b58d7614deb7fab21586bdd4b650d982a13800f83d9ab33b567cc731b214","source":"reversing-labs","versions":["0.0.1"],"import_time":"2026-07-09T09:13:57.813829735Z","modified_time":"2026-07-07T12:04:10Z"},{"id":"RLUA-2026-09363","sha256":"ceeb92f24000299bfd1b9c423a5d6ecb1d0ebd13259a75efb8040736d6c2864d","source":"reversing-labs","import_time":"2026-09-24T08:49:09.284037619Z","modified_time":"2026-09-22T16:42:41Z"}]}},"related_cves":[],"security_relevant":true,"severity_evidence":null}},{"id":10131,"advisory_id":"f3055644-500a-4813-be50-8430f41a7323","revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MAL-2026-8811","source_published_at":"2026-07-07T12:04:08+00:00","published_at":"2026-10-24T23:28:48.00024+00:00","extraction_method":"structured","technologies":["core-osv","sm8255oilg"],"cve_ids":[],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Malicious code in sm8255oilg (RubyGems)","summary":"--- _-= Per source details. Do not edit below this line.=-_","evidence":"osv:MAL-2026-8811","products":[{"name":{"value":"sm8255oilg","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[{"value":"0.0.1","evidence":"/affected/0/versions"}]}],"severity":"unknown","structured":{"id":"MAL-2026-8811","aliases":["GHSA-xm83-4rc2-97wf","MAL-2026-8811"],"affected":[{"package":{"name":"sm8255oilg","purl":"pkg:gem/sm8255oilg","ecosystem":"RubyGems"},"versions":["0.0.1"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/rubygems/sm8255oilg/MAL-2026-8811.json"}}],"modified":"2026-09-24T09:02:47.431571787Z","provider":"osv","references":["https://github.com/advisories/GHSA-xm83-4rc2-97wf"],"provider_metadata":{"malicious-packages-origins":[{"id":"RLMA-2026-03462","sha256":"8492d171c3281da6b85af2a18ebd434e5d8023938fec341a35ca35e66f238a80","source":"reversing-labs","versions":["0.0.1"],"import_time":"2026-07-09T09:13:57.532887483Z","modified_time":"2026-07-07T12:04:08Z"},{"id":"RLUA-2026-09360","sha256":"dcbde3f74fc4f52d4ee455729bee2f2d70ca3ab3537b7c0f9a8ab1b9a9eeaece","source":"reversing-labs","import_time":"2026-09-24T08:49:09.041833059Z","modified_time":"2026-09-22T16:42:38Z"}]}},"related_cves":[],"security_relevant":true,"severity_evidence":null}}],"next_after":10160,"next_before":10131}