{"schema_version":"2","view":"grouped","data":[{"id":6355,"cve_ids":[],"payload":{"kind":"advisory","title":"Malicious code in l0pxstat (RubyGems)","summary":"--- _-= Per source details. Do not edit below this line.=-_","evidence":"osv:MAL-2026-7781","products":[{"name":{"value":"l0pxstat","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[{"value":"0.0.1","evidence":"/affected/0/versions"},{"value":"0.0.2","evidence":"/affected/0/versions"}]}],"severity":"unknown","structured":{"id":"MAL-2026-7781","aliases":["GHSA-m2hj-pqf3-qqgh","MAL-2026-7781"],"affected":[{"package":{"name":"l0pxstat","purl":"pkg:gem/l0pxstat","ecosystem":"RubyGems"},"versions":["0.0.1","0.0.2"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/rubygems/l0pxstat/MAL-2026-7781.json"}}],"modified":"2026-09-24T09:01:06.981878059Z","provider":"osv","references":["https://github.com/advisories/GHSA-m2hj-pqf3-qqgh"],"provider_metadata":{"malicious-packages-origins":[{"id":"RLMA-2026-02432","sha256":"9edd92cfee8eeed621d8978f742130a9e27cd9e4ee5c17e8c1ef348ca2758892","source":"reversing-labs","versions":["0.0.1","0.0.2"],"import_time":"2026-07-09T09:12:14.585378379Z","modified_time":"2026-07-07T11:53:56Z"},{"id":"RLUA-2026-08247","sha256":"090d000ac6d9dadd77fd5bc818615b2434c6092c4a876c629fb0c00b3ef0af98","source":"reversing-labs","import_time":"2026-09-24T08:47:40.143766999Z","modified_time":"2026-09-22T16:27:17Z"}]}},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:e4e28247-5a42-4899-b042-3767e44d5c37","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MAL-2026-7781","advisory_id":"e4e28247-5a42-4899-b042-3767e44d5c37","event_types":["advisory"],"published_at":"2026-10-24T22:26:23.573011+00:00","technologies":["core-osv","l0pxstat"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-07-07T11:53:56+00:00","detail_url":"/advisories/advisory%3Ae4e28247-5a42-4899-b042-3767e44d5c37","group":{"id":"advisory:e4e28247-5a42-4899-b042-3767e44d5c37","revision":1,"primary_event_id":6367,"change":"published","superseded_by":[],"changed":{"id":6367,"cve_ids":[],"payload":{"kind":"advisory","title":"Malicious code in l0pxstat (RubyGems)","summary":"--- _-= Per source details. Do not edit below this line.=-_","evidence":"osv:MAL-2026-7781","products":[{"name":{"value":"l0pxstat","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[{"value":"0.0.1","evidence":"/affected/0/versions"},{"value":"0.0.2","evidence":"/affected/0/versions"}]}],"severity":"unknown","structured":{"id":"MAL-2026-7781","aliases":["GHSA-m2hj-pqf3-qqgh","MAL-2026-7781"],"affected":[{"package":{"name":"l0pxstat","purl":"pkg:gem/l0pxstat","ecosystem":"RubyGems"},"versions":["0.0.1","0.0.2"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/rubygems/l0pxstat/MAL-2026-7781.json"}}],"modified":"2026-09-24T09:01:06.981878059Z","provider":"osv","references":["https://github.com/advisories/GHSA-m2hj-pqf3-qqgh"],"provider_metadata":{"malicious-packages-origins":[{"id":"RLMA-2026-02432","sha256":"9edd92cfee8eeed621d8978f742130a9e27cd9e4ee5c17e8c1ef348ca2758892","source":"reversing-labs","versions":["0.0.1","0.0.2"],"import_time":"2026-07-09T09:12:14.585378379Z","modified_time":"2026-07-07T11:53:56Z"},{"id":"RLUA-2026-08247","sha256":"090d000ac6d9dadd77fd5bc818615b2434c6092c4a876c629fb0c00b3ef0af98","source":"reversing-labs","import_time":"2026-09-24T08:47:40.143766999Z","modified_time":"2026-09-22T16:27:17Z"}]}},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:e4e28247-5a42-4899-b042-3767e44d5c37","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MAL-2026-7781","advisory_id":"e4e28247-5a42-4899-b042-3767e44d5c37","event_types":["advisory"],"published_at":"2026-10-24T22:26:23.573011+00:00","technologies":["core-osv","l0pxstat"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-07-07T11:53:56+00:00","detail_url":"/events/6367"},"members":[{"id":6367,"cve_ids":[],"payload":{"kind":"advisory","title":"Malicious code in l0pxstat (RubyGems)","summary":"--- _-= Per source details. Do not edit below this line.=-_","evidence":"osv:MAL-2026-7781","products":[{"name":{"value":"l0pxstat","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[{"value":"0.0.1","evidence":"/affected/0/versions"},{"value":"0.0.2","evidence":"/affected/0/versions"}]}],"severity":"unknown","structured":{"id":"MAL-2026-7781","aliases":["GHSA-m2hj-pqf3-qqgh","MAL-2026-7781"],"affected":[{"package":{"name":"l0pxstat","purl":"pkg:gem/l0pxstat","ecosystem":"RubyGems"},"versions":["0.0.1","0.0.2"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/rubygems/l0pxstat/MAL-2026-7781.json"}}],"modified":"2026-09-24T09:01:06.981878059Z","provider":"osv","references":["https://github.com/advisories/GHSA-m2hj-pqf3-qqgh"],"provider_metadata":{"malicious-packages-origins":[{"id":"RLMA-2026-02432","sha256":"9edd92cfee8eeed621d8978f742130a9e27cd9e4ee5c17e8c1ef348ca2758892","source":"reversing-labs","versions":["0.0.1","0.0.2"],"import_time":"2026-07-09T09:12:14.585378379Z","modified_time":"2026-07-07T11:53:56Z"},{"id":"RLUA-2026-08247","sha256":"090d000ac6d9dadd77fd5bc818615b2434c6092c4a876c629fb0c00b3ef0af98","source":"reversing-labs","import_time":"2026-09-24T08:47:40.143766999Z","modified_time":"2026-09-22T16:27:17Z"}]}},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:e4e28247-5a42-4899-b042-3767e44d5c37","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MAL-2026-7781","advisory_id":"e4e28247-5a42-4899-b042-3767e44d5c37","event_types":["advisory"],"published_at":"2026-10-24T22:26:23.573011+00:00","technologies":["core-osv","l0pxstat"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-07-07T11:53:56+00:00","detail_url":"/events/6367"}]}}],"next_after":6355,"next_before":6355}