{"schema_version":"2","view":"grouped","data":[{"id":6460,"cve_ids":[],"payload":{"kind":"advisory","title":"Malicious code in hgprobe20548 (RubyGems)","summary":"--- _-= Per source details. Do not edit below this line.=-_","evidence":"osv:MAL-2026-7741","products":[{"name":{"value":"hgprobe20548","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[{"value":"0.0.858540","evidence":"/affected/0/versions"}]}],"severity":"unknown","structured":{"id":"MAL-2026-7741","aliases":["GHSA-jwcm-qgg7-4x7x","MAL-2026-7741"],"affected":[{"package":{"name":"hgprobe20548","purl":"pkg:gem/hgprobe20548","ecosystem":"RubyGems"},"versions":["0.0.858540"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/rubygems/hgprobe20548/MAL-2026-7741.json"}}],"modified":"2026-09-24T09:01:15.662103226Z","provider":"osv","references":["https://github.com/advisories/GHSA-jwcm-qgg7-4x7x"],"provider_metadata":{"malicious-packages-origins":[{"id":"RLMA-2026-02392","sha256":"181193f9684e0b8007eeb4e8d2d158dae0a02ca1c4c0c7e08b36f949b64b3de8","source":"reversing-labs","versions":["0.0.858540"],"import_time":"2026-07-09T09:12:10.142448877Z","modified_time":"2026-07-07T11:53:31Z"},{"id":"RLUA-2026-08190","sha256":"ead5a7d306b103fcdf9997b419894954b94da5fc04543bb2078f33bdb4636349","source":"reversing-labs","import_time":"2026-09-24T08:47:35.580765374Z","modified_time":"2026-09-22T16:26:32Z"}]}},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:a3999c26-7e89-4dc6-b3dd-0c914d710be8","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MAL-2026-7741","advisory_id":"a3999c26-7e89-4dc6-b3dd-0c914d710be8","event_types":["advisory"],"published_at":"2026-10-24T22:28:04.462452+00:00","technologies":["core-osv","hgprobe20548"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-07-07T11:53:31+00:00","detail_url":"/advisories/advisory%3Aa3999c26-7e89-4dc6-b3dd-0c914d710be8","group":{"id":"advisory:a3999c26-7e89-4dc6-b3dd-0c914d710be8","revision":1,"primary_event_id":6471,"change":"published","superseded_by":[],"changed":{"id":6471,"cve_ids":[],"payload":{"kind":"advisory","title":"Malicious code in hgprobe20548 (RubyGems)","summary":"--- _-= Per source details. Do not edit below this line.=-_","evidence":"osv:MAL-2026-7741","products":[{"name":{"value":"hgprobe20548","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[{"value":"0.0.858540","evidence":"/affected/0/versions"}]}],"severity":"unknown","structured":{"id":"MAL-2026-7741","aliases":["GHSA-jwcm-qgg7-4x7x","MAL-2026-7741"],"affected":[{"package":{"name":"hgprobe20548","purl":"pkg:gem/hgprobe20548","ecosystem":"RubyGems"},"versions":["0.0.858540"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/rubygems/hgprobe20548/MAL-2026-7741.json"}}],"modified":"2026-09-24T09:01:15.662103226Z","provider":"osv","references":["https://github.com/advisories/GHSA-jwcm-qgg7-4x7x"],"provider_metadata":{"malicious-packages-origins":[{"id":"RLMA-2026-02392","sha256":"181193f9684e0b8007eeb4e8d2d158dae0a02ca1c4c0c7e08b36f949b64b3de8","source":"reversing-labs","versions":["0.0.858540"],"import_time":"2026-07-09T09:12:10.142448877Z","modified_time":"2026-07-07T11:53:31Z"},{"id":"RLUA-2026-08190","sha256":"ead5a7d306b103fcdf9997b419894954b94da5fc04543bb2078f33bdb4636349","source":"reversing-labs","import_time":"2026-09-24T08:47:35.580765374Z","modified_time":"2026-09-22T16:26:32Z"}]}},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:a3999c26-7e89-4dc6-b3dd-0c914d710be8","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MAL-2026-7741","advisory_id":"a3999c26-7e89-4dc6-b3dd-0c914d710be8","event_types":["advisory"],"published_at":"2026-10-24T22:28:04.462452+00:00","technologies":["core-osv","hgprobe20548"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-07-07T11:53:31+00:00","detail_url":"/events/6471"},"members":[{"id":6471,"cve_ids":[],"payload":{"kind":"advisory","title":"Malicious code in hgprobe20548 (RubyGems)","summary":"--- _-= Per source details. Do not edit below this line.=-_","evidence":"osv:MAL-2026-7741","products":[{"name":{"value":"hgprobe20548","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[{"value":"0.0.858540","evidence":"/affected/0/versions"}]}],"severity":"unknown","structured":{"id":"MAL-2026-7741","aliases":["GHSA-jwcm-qgg7-4x7x","MAL-2026-7741"],"affected":[{"package":{"name":"hgprobe20548","purl":"pkg:gem/hgprobe20548","ecosystem":"RubyGems"},"versions":["0.0.858540"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/rubygems/hgprobe20548/MAL-2026-7741.json"}}],"modified":"2026-09-24T09:01:15.662103226Z","provider":"osv","references":["https://github.com/advisories/GHSA-jwcm-qgg7-4x7x"],"provider_metadata":{"malicious-packages-origins":[{"id":"RLMA-2026-02392","sha256":"181193f9684e0b8007eeb4e8d2d158dae0a02ca1c4c0c7e08b36f949b64b3de8","source":"reversing-labs","versions":["0.0.858540"],"import_time":"2026-07-09T09:12:10.142448877Z","modified_time":"2026-07-07T11:53:31Z"},{"id":"RLUA-2026-08190","sha256":"ead5a7d306b103fcdf9997b419894954b94da5fc04543bb2078f33bdb4636349","source":"reversing-labs","import_time":"2026-09-24T08:47:35.580765374Z","modified_time":"2026-09-22T16:26:32Z"}]}},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:a3999c26-7e89-4dc6-b3dd-0c914d710be8","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MAL-2026-7741","advisory_id":"a3999c26-7e89-4dc6-b3dd-0c914d710be8","event_types":["advisory"],"published_at":"2026-10-24T22:28:04.462452+00:00","technologies":["core-osv","hgprobe20548"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-07-07T11:53:31+00:00","detail_url":"/events/6471"}]}}],"next_after":6460,"next_before":6460}