{"schema_version":"2","view":"grouped","data":[{"id":6391,"cve_ids":[],"payload":{"kind":"advisory","title":"Malicious code in ffxnzzez0bc (RubyGems)","summary":"--- _-= Per source details. Do not edit below this line.=-_","evidence":"osv:MAL-2026-7685","products":[{"name":{"value":"ffxnzzez0bc","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[{"value":"0.0.1","evidence":"/affected/0/versions"},{"value":"0.0.2","evidence":"/affected/0/versions"},{"value":"0.0.3","evidence":"/affected/0/versions"}]}],"severity":"unknown","structured":{"id":"MAL-2026-7685","aliases":["GHSA-p8fr-m7c7-qw5g","MAL-2026-7685"],"affected":[{"package":{"name":"ffxnzzez0bc","purl":"pkg:gem/ffxnzzez0bc","ecosystem":"RubyGems"},"versions":["0.0.1","0.0.2","0.0.3"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/rubygems/ffxnzzez0bc/MAL-2026-7685.json"}}],"modified":"2026-09-24T09:01:09.888268252Z","provider":"osv","references":["https://github.com/advisories/GHSA-p8fr-m7c7-qw5g"],"provider_metadata":{"malicious-packages-origins":[{"id":"RLMA-2026-02336","sha256":"a80bc390d77fe3f1925e7a085067250ed03814ecda60d838c557a6e7d17cb03e","source":"reversing-labs","versions":["0.0.1","0.0.2","0.0.3"],"import_time":"2026-07-09T09:12:04.488061897Z","modified_time":"2026-07-07T11:52:54Z"},{"id":"RLUA-2026-08081","sha256":"2dd90c62536686970a379170f6dce1d4613c21bdc36ee202d61b122cde30e0ca","source":"reversing-labs","import_time":"2026-09-24T08:47:26.839274316Z","modified_time":"2026-09-22T16:24:59Z"}]}},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:1b563fc2-1d6e-4382-8c9c-386924aba4e3","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MAL-2026-7685","advisory_id":"1b563fc2-1d6e-4382-8c9c-386924aba4e3","event_types":["advisory"],"published_at":"2026-10-24T22:27:21.834812+00:00","technologies":["core-osv","ffxnzzez0bc"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-07-07T11:52:54+00:00","detail_url":"/advisories/advisory%3A1b563fc2-1d6e-4382-8c9c-386924aba4e3","group":{"id":"advisory:1b563fc2-1d6e-4382-8c9c-386924aba4e3","revision":1,"primary_event_id":6402,"change":"published","superseded_by":[],"changed":{"id":6402,"cve_ids":[],"payload":{"kind":"advisory","title":"Malicious code in ffxnzzez0bc (RubyGems)","summary":"--- _-= Per source details. Do not edit below this line.=-_","evidence":"osv:MAL-2026-7685","products":[{"name":{"value":"ffxnzzez0bc","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[{"value":"0.0.1","evidence":"/affected/0/versions"},{"value":"0.0.2","evidence":"/affected/0/versions"},{"value":"0.0.3","evidence":"/affected/0/versions"}]}],"severity":"unknown","structured":{"id":"MAL-2026-7685","aliases":["GHSA-p8fr-m7c7-qw5g","MAL-2026-7685"],"affected":[{"package":{"name":"ffxnzzez0bc","purl":"pkg:gem/ffxnzzez0bc","ecosystem":"RubyGems"},"versions":["0.0.1","0.0.2","0.0.3"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/rubygems/ffxnzzez0bc/MAL-2026-7685.json"}}],"modified":"2026-09-24T09:01:09.888268252Z","provider":"osv","references":["https://github.com/advisories/GHSA-p8fr-m7c7-qw5g"],"provider_metadata":{"malicious-packages-origins":[{"id":"RLMA-2026-02336","sha256":"a80bc390d77fe3f1925e7a085067250ed03814ecda60d838c557a6e7d17cb03e","source":"reversing-labs","versions":["0.0.1","0.0.2","0.0.3"],"import_time":"2026-07-09T09:12:04.488061897Z","modified_time":"2026-07-07T11:52:54Z"},{"id":"RLUA-2026-08081","sha256":"2dd90c62536686970a379170f6dce1d4613c21bdc36ee202d61b122cde30e0ca","source":"reversing-labs","import_time":"2026-09-24T08:47:26.839274316Z","modified_time":"2026-09-22T16:24:59Z"}]}},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:1b563fc2-1d6e-4382-8c9c-386924aba4e3","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MAL-2026-7685","advisory_id":"1b563fc2-1d6e-4382-8c9c-386924aba4e3","event_types":["advisory"],"published_at":"2026-10-24T22:27:21.834812+00:00","technologies":["core-osv","ffxnzzez0bc"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-07-07T11:52:54+00:00","detail_url":"/events/6402"},"members":[{"id":6402,"cve_ids":[],"payload":{"kind":"advisory","title":"Malicious code in ffxnzzez0bc (RubyGems)","summary":"--- _-= Per source details. Do not edit below this line.=-_","evidence":"osv:MAL-2026-7685","products":[{"name":{"value":"ffxnzzez0bc","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[{"value":"0.0.1","evidence":"/affected/0/versions"},{"value":"0.0.2","evidence":"/affected/0/versions"},{"value":"0.0.3","evidence":"/affected/0/versions"}]}],"severity":"unknown","structured":{"id":"MAL-2026-7685","aliases":["GHSA-p8fr-m7c7-qw5g","MAL-2026-7685"],"affected":[{"package":{"name":"ffxnzzez0bc","purl":"pkg:gem/ffxnzzez0bc","ecosystem":"RubyGems"},"versions":["0.0.1","0.0.2","0.0.3"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/rubygems/ffxnzzez0bc/MAL-2026-7685.json"}}],"modified":"2026-09-24T09:01:09.888268252Z","provider":"osv","references":["https://github.com/advisories/GHSA-p8fr-m7c7-qw5g"],"provider_metadata":{"malicious-packages-origins":[{"id":"RLMA-2026-02336","sha256":"a80bc390d77fe3f1925e7a085067250ed03814ecda60d838c557a6e7d17cb03e","source":"reversing-labs","versions":["0.0.1","0.0.2","0.0.3"],"import_time":"2026-07-09T09:12:04.488061897Z","modified_time":"2026-07-07T11:52:54Z"},{"id":"RLUA-2026-08081","sha256":"2dd90c62536686970a379170f6dce1d4613c21bdc36ee202d61b122cde30e0ca","source":"reversing-labs","import_time":"2026-09-24T08:47:26.839274316Z","modified_time":"2026-09-22T16:24:59Z"}]}},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:1b563fc2-1d6e-4382-8c9c-386924aba4e3","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MAL-2026-7685","advisory_id":"1b563fc2-1d6e-4382-8c9c-386924aba4e3","event_types":["advisory"],"published_at":"2026-10-24T22:27:21.834812+00:00","technologies":["core-osv","ffxnzzez0bc"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-07-07T11:52:54+00:00","detail_url":"/events/6402"}]}}],"next_after":6391,"next_before":6391}