{"schema_version":"2","view":"grouped","data":[{"id":6318,"cve_ids":[],"payload":{"kind":"advisory","title":"Malicious code in dradis_ntospider (RubyGems)","summary":"--- _-= Per source details. Do not edit below this line.=-_","evidence":"osv:MAL-2024-6873","products":[{"name":{"value":"dradis_ntospider","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[{"value":"3.15.0","evidence":"/affected/0/versions"}]}],"severity":"unknown","structured":{"id":"MAL-2024-6873","aliases":["GHSA-5r97-g83p-w734","MAL-2024-6873"],"affected":[{"package":{"name":"dradis_ntospider","purl":"pkg:gem/dradis_ntospider","ecosystem":"RubyGems"},"versions":["3.15.0"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/rubygems/dradis_ntospider/MAL-2024-6873.json"}}],"modified":"2026-09-24T09:01:03.477042986Z","provider":"osv","references":["https://blog.reversinglabs.com/blog/mining-for-malicious-ruby-gems","https://github.com/advisories/GHSA-5r97-g83p-w734"],"provider_metadata":{"malicious-packages-origins":[{"id":"RLMA-2024-05679","sha256":"e9895af658b20db8c8fed1e3f702a15ffa40fd07239cb340a3880fab28159b34","source":"reversing-labs","versions":["3.15.0"],"import_time":"2024-06-28T02:52:29.379208188Z","modified_time":"2024-06-25T13:50:40Z"},{"id":"RLUA-2024-10198","sha256":"6a9e9794ede7c10770575e7b33c43016b520f1c1c9528599f1d7a3f1b591c8ed","source":"reversing-labs","import_time":"2024-10-24T01:01:13.547002278Z","modified_time":"2024-10-16T15:02:56Z"},{"id":"RLUA-2026-08017","sha256":"757b4ce525b747ee7f0098736068552ac777c457388a78713eeff98a72079c58","source":"reversing-labs","import_time":"2026-09-24T08:47:21.666906617Z","modified_time":"2026-09-22T16:24:06Z"}]}},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:b7fff8e2-f2a5-4b5d-b97b-9808132f6ba1","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MAL-2024-6873","advisory_id":"b7fff8e2-f2a5-4b5d-b97b-9808132f6ba1","event_types":["advisory"],"published_at":"2026-10-24T22:26:03.158898+00:00","technologies":["core-osv","dradis-ntospider"],"context_update":false,"extraction_method":"structured","source_published_at":"2024-06-25T13:50:40+00:00","detail_url":"/advisories/advisory%3Ab7fff8e2-f2a5-4b5d-b97b-9808132f6ba1","group":{"id":"advisory:b7fff8e2-f2a5-4b5d-b97b-9808132f6ba1","revision":1,"primary_event_id":6330,"change":"published","superseded_by":[],"changed":{"id":6330,"cve_ids":[],"payload":{"kind":"advisory","title":"Malicious code in dradis_ntospider (RubyGems)","summary":"--- _-= Per source details. Do not edit below this line.=-_","evidence":"osv:MAL-2024-6873","products":[{"name":{"value":"dradis_ntospider","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[{"value":"3.15.0","evidence":"/affected/0/versions"}]}],"severity":"unknown","structured":{"id":"MAL-2024-6873","aliases":["GHSA-5r97-g83p-w734","MAL-2024-6873"],"affected":[{"package":{"name":"dradis_ntospider","purl":"pkg:gem/dradis_ntospider","ecosystem":"RubyGems"},"versions":["3.15.0"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/rubygems/dradis_ntospider/MAL-2024-6873.json"}}],"modified":"2026-09-24T09:01:03.477042986Z","provider":"osv","references":["https://blog.reversinglabs.com/blog/mining-for-malicious-ruby-gems","https://github.com/advisories/GHSA-5r97-g83p-w734"],"provider_metadata":{"malicious-packages-origins":[{"id":"RLMA-2024-05679","sha256":"e9895af658b20db8c8fed1e3f702a15ffa40fd07239cb340a3880fab28159b34","source":"reversing-labs","versions":["3.15.0"],"import_time":"2024-06-28T02:52:29.379208188Z","modified_time":"2024-06-25T13:50:40Z"},{"id":"RLUA-2024-10198","sha256":"6a9e9794ede7c10770575e7b33c43016b520f1c1c9528599f1d7a3f1b591c8ed","source":"reversing-labs","import_time":"2024-10-24T01:01:13.547002278Z","modified_time":"2024-10-16T15:02:56Z"},{"id":"RLUA-2026-08017","sha256":"757b4ce525b747ee7f0098736068552ac777c457388a78713eeff98a72079c58","source":"reversing-labs","import_time":"2026-09-24T08:47:21.666906617Z","modified_time":"2026-09-22T16:24:06Z"}]}},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:b7fff8e2-f2a5-4b5d-b97b-9808132f6ba1","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MAL-2024-6873","advisory_id":"b7fff8e2-f2a5-4b5d-b97b-9808132f6ba1","event_types":["advisory"],"published_at":"2026-10-24T22:26:03.158898+00:00","technologies":["core-osv","dradis-ntospider"],"context_update":false,"extraction_method":"structured","source_published_at":"2024-06-25T13:50:40+00:00","detail_url":"/events/6330"},"members":[{"id":6330,"cve_ids":[],"payload":{"kind":"advisory","title":"Malicious code in dradis_ntospider (RubyGems)","summary":"--- _-= Per source details. Do not edit below this line.=-_","evidence":"osv:MAL-2024-6873","products":[{"name":{"value":"dradis_ntospider","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[{"value":"3.15.0","evidence":"/affected/0/versions"}]}],"severity":"unknown","structured":{"id":"MAL-2024-6873","aliases":["GHSA-5r97-g83p-w734","MAL-2024-6873"],"affected":[{"package":{"name":"dradis_ntospider","purl":"pkg:gem/dradis_ntospider","ecosystem":"RubyGems"},"versions":["3.15.0"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/rubygems/dradis_ntospider/MAL-2024-6873.json"}}],"modified":"2026-09-24T09:01:03.477042986Z","provider":"osv","references":["https://blog.reversinglabs.com/blog/mining-for-malicious-ruby-gems","https://github.com/advisories/GHSA-5r97-g83p-w734"],"provider_metadata":{"malicious-packages-origins":[{"id":"RLMA-2024-05679","sha256":"e9895af658b20db8c8fed1e3f702a15ffa40fd07239cb340a3880fab28159b34","source":"reversing-labs","versions":["3.15.0"],"import_time":"2024-06-28T02:52:29.379208188Z","modified_time":"2024-06-25T13:50:40Z"},{"id":"RLUA-2024-10198","sha256":"6a9e9794ede7c10770575e7b33c43016b520f1c1c9528599f1d7a3f1b591c8ed","source":"reversing-labs","import_time":"2024-10-24T01:01:13.547002278Z","modified_time":"2024-10-16T15:02:56Z"},{"id":"RLUA-2026-08017","sha256":"757b4ce525b747ee7f0098736068552ac777c457388a78713eeff98a72079c58","source":"reversing-labs","import_time":"2026-09-24T08:47:21.666906617Z","modified_time":"2026-09-22T16:24:06Z"}]}},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:b7fff8e2-f2a5-4b5d-b97b-9808132f6ba1","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MAL-2024-6873","advisory_id":"b7fff8e2-f2a5-4b5d-b97b-9808132f6ba1","event_types":["advisory"],"published_at":"2026-10-24T22:26:03.158898+00:00","technologies":["core-osv","dradis-ntospider"],"context_update":false,"extraction_method":"structured","source_published_at":"2024-06-25T13:50:40+00:00","detail_url":"/events/6330"}]}}],"next_after":6318,"next_before":6318}