{"schema_version":"2","view":"grouped","data":[{"id":6447,"cve_ids":[],"payload":{"kind":"advisory","title":"Malicious code in fosscw2 (RubyGems)","summary":"--- _-= Per source details. Do not edit below this line.=-_","evidence":"osv:MAL-2026-7691","products":[{"name":{"value":"fosscw2","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[{"value":"0.0.1","evidence":"/affected/0/versions"}]}],"severity":"unknown","structured":{"id":"MAL-2026-7691","aliases":["GHSA-88j8-xm6r-6wq4","MAL-2026-7691"],"affected":[{"package":{"name":"fosscw2","purl":"pkg:gem/fosscw2","ecosystem":"RubyGems"},"versions":["0.0.1"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/rubygems/fosscw2/MAL-2026-7691.json"}}],"modified":"2026-09-24T09:01:14.564495171Z","provider":"osv","references":["https://github.com/advisories/GHSA-88j8-xm6r-6wq4"],"provider_metadata":{"malicious-packages-origins":[{"id":"RLMA-2026-02342","sha256":"ec258a3fd3f1f5273cec10dfe7b85a060c867972f2b16f55138ca4efe3a663ec","source":"reversing-labs","versions":["0.0.1"],"import_time":"2026-07-09T09:12:05.078725213Z","modified_time":"2026-07-07T11:52:57Z"},{"id":"RLUA-2026-08119","sha256":"0e7a7832e3a25ab7319a22b27334700289f5d34b705e61ec9a945d890a8dcdf0","source":"reversing-labs","import_time":"2026-09-24T08:47:30.013613743Z","modified_time":"2026-09-22T16:25:31Z"}]}},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:dc4530fd-07c3-4dbc-80c8-cbc800d3d336","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MAL-2026-7691","advisory_id":"dc4530fd-07c3-4dbc-80c8-cbc800d3d336","event_types":["advisory"],"published_at":"2026-10-24T22:27:56.666434+00:00","technologies":["core-osv","fosscw2"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-07-07T11:52:57+00:00","detail_url":"/advisories/advisory%3Adc4530fd-07c3-4dbc-80c8-cbc800d3d336","group":{"id":"advisory:dc4530fd-07c3-4dbc-80c8-cbc800d3d336","revision":1,"primary_event_id":6458,"change":"published","superseded_by":[],"changed":{"id":6458,"cve_ids":[],"payload":{"kind":"advisory","title":"Malicious code in fosscw2 (RubyGems)","summary":"--- _-= Per source details. Do not edit below this line.=-_","evidence":"osv:MAL-2026-7691","products":[{"name":{"value":"fosscw2","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[{"value":"0.0.1","evidence":"/affected/0/versions"}]}],"severity":"unknown","structured":{"id":"MAL-2026-7691","aliases":["GHSA-88j8-xm6r-6wq4","MAL-2026-7691"],"affected":[{"package":{"name":"fosscw2","purl":"pkg:gem/fosscw2","ecosystem":"RubyGems"},"versions":["0.0.1"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/rubygems/fosscw2/MAL-2026-7691.json"}}],"modified":"2026-09-24T09:01:14.564495171Z","provider":"osv","references":["https://github.com/advisories/GHSA-88j8-xm6r-6wq4"],"provider_metadata":{"malicious-packages-origins":[{"id":"RLMA-2026-02342","sha256":"ec258a3fd3f1f5273cec10dfe7b85a060c867972f2b16f55138ca4efe3a663ec","source":"reversing-labs","versions":["0.0.1"],"import_time":"2026-07-09T09:12:05.078725213Z","modified_time":"2026-07-07T11:52:57Z"},{"id":"RLUA-2026-08119","sha256":"0e7a7832e3a25ab7319a22b27334700289f5d34b705e61ec9a945d890a8dcdf0","source":"reversing-labs","import_time":"2026-09-24T08:47:30.013613743Z","modified_time":"2026-09-22T16:25:31Z"}]}},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:dc4530fd-07c3-4dbc-80c8-cbc800d3d336","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MAL-2026-7691","advisory_id":"dc4530fd-07c3-4dbc-80c8-cbc800d3d336","event_types":["advisory"],"published_at":"2026-10-24T22:27:56.666434+00:00","technologies":["core-osv","fosscw2"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-07-07T11:52:57+00:00","detail_url":"/events/6458"},"members":[{"id":6458,"cve_ids":[],"payload":{"kind":"advisory","title":"Malicious code in fosscw2 (RubyGems)","summary":"--- _-= Per source details. Do not edit below this line.=-_","evidence":"osv:MAL-2026-7691","products":[{"name":{"value":"fosscw2","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[{"value":"0.0.1","evidence":"/affected/0/versions"}]}],"severity":"unknown","structured":{"id":"MAL-2026-7691","aliases":["GHSA-88j8-xm6r-6wq4","MAL-2026-7691"],"affected":[{"package":{"name":"fosscw2","purl":"pkg:gem/fosscw2","ecosystem":"RubyGems"},"versions":["0.0.1"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/rubygems/fosscw2/MAL-2026-7691.json"}}],"modified":"2026-09-24T09:01:14.564495171Z","provider":"osv","references":["https://github.com/advisories/GHSA-88j8-xm6r-6wq4"],"provider_metadata":{"malicious-packages-origins":[{"id":"RLMA-2026-02342","sha256":"ec258a3fd3f1f5273cec10dfe7b85a060c867972f2b16f55138ca4efe3a663ec","source":"reversing-labs","versions":["0.0.1"],"import_time":"2026-07-09T09:12:05.078725213Z","modified_time":"2026-07-07T11:52:57Z"},{"id":"RLUA-2026-08119","sha256":"0e7a7832e3a25ab7319a22b27334700289f5d34b705e61ec9a945d890a8dcdf0","source":"reversing-labs","import_time":"2026-09-24T08:47:30.013613743Z","modified_time":"2026-09-22T16:25:31Z"}]}},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:dc4530fd-07c3-4dbc-80c8-cbc800d3d336","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MAL-2026-7691","advisory_id":"dc4530fd-07c3-4dbc-80c8-cbc800d3d336","event_types":["advisory"],"published_at":"2026-10-24T22:27:56.666434+00:00","technologies":["core-osv","fosscw2"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-07-07T11:52:57+00:00","detail_url":"/events/6458"}]}}],"next_after":6447,"next_before":6447}