{"schema_version":"2","view":"grouped","data":[{"id":6356,"cve_ids":[],"payload":{"kind":"advisory","title":"Malicious code in lambegitx4062 (RubyGems)","summary":"--- _-= Per source details. Do not edit below this line.=-_","evidence":"osv:MAL-2026-7788","products":[{"name":{"value":"lambegitx4062","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[{"value":"0.0.1","evidence":"/affected/0/versions"},{"value":"0.0.3","evidence":"/affected/0/versions"}]}],"severity":"unknown","structured":{"id":"MAL-2026-7788","aliases":["GHSA-2v82-pmqh-339h","MAL-2026-7788"],"affected":[{"package":{"name":"lambegitx4062","purl":"pkg:gem/lambegitx4062","ecosystem":"RubyGems"},"versions":["0.0.1","0.0.3"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/rubygems/lambegitx4062/MAL-2026-7788.json"}}],"modified":"2026-09-24T09:01:07.010817596Z","provider":"osv","references":["https://github.com/advisories/GHSA-2v82-pmqh-339h"],"provider_metadata":{"malicious-packages-origins":[{"id":"RLMA-2026-02446","sha256":"99bd20283ed4a8e3d9836ea79e4677f070a907686829df6984072cb13d4df016","source":"reversing-labs","versions":["0.0.1","0.0.3"],"import_time":"2026-07-09T09:12:15.863999958Z","modified_time":"2026-07-07T11:54:04Z"},{"id":"RLUA-2026-08261","sha256":"faed874908f38bee8aa0af795f50bff5c0c6f1c8cf4e04aa1906cf2fb57ab6e4","source":"reversing-labs","import_time":"2026-09-24T08:47:41.238899885Z","modified_time":"2026-09-22T16:27:29Z"}]}},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:7464a4d0-5daf-4f0c-811c-c030864c8365","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MAL-2026-7788","advisory_id":"7464a4d0-5daf-4f0c-811c-c030864c8365","event_types":["advisory"],"published_at":"2026-10-24T22:26:24.157854+00:00","technologies":["core-osv","lambegitx4062"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-07-07T11:54:04+00:00","detail_url":"/advisories/advisory%3A7464a4d0-5daf-4f0c-811c-c030864c8365","group":{"id":"advisory:7464a4d0-5daf-4f0c-811c-c030864c8365","revision":1,"primary_event_id":6368,"change":"published","superseded_by":[],"changed":{"id":6368,"cve_ids":[],"payload":{"kind":"advisory","title":"Malicious code in lambegitx4062 (RubyGems)","summary":"--- _-= Per source details. Do not edit below this line.=-_","evidence":"osv:MAL-2026-7788","products":[{"name":{"value":"lambegitx4062","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[{"value":"0.0.1","evidence":"/affected/0/versions"},{"value":"0.0.3","evidence":"/affected/0/versions"}]}],"severity":"unknown","structured":{"id":"MAL-2026-7788","aliases":["GHSA-2v82-pmqh-339h","MAL-2026-7788"],"affected":[{"package":{"name":"lambegitx4062","purl":"pkg:gem/lambegitx4062","ecosystem":"RubyGems"},"versions":["0.0.1","0.0.3"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/rubygems/lambegitx4062/MAL-2026-7788.json"}}],"modified":"2026-09-24T09:01:07.010817596Z","provider":"osv","references":["https://github.com/advisories/GHSA-2v82-pmqh-339h"],"provider_metadata":{"malicious-packages-origins":[{"id":"RLMA-2026-02446","sha256":"99bd20283ed4a8e3d9836ea79e4677f070a907686829df6984072cb13d4df016","source":"reversing-labs","versions":["0.0.1","0.0.3"],"import_time":"2026-07-09T09:12:15.863999958Z","modified_time":"2026-07-07T11:54:04Z"},{"id":"RLUA-2026-08261","sha256":"faed874908f38bee8aa0af795f50bff5c0c6f1c8cf4e04aa1906cf2fb57ab6e4","source":"reversing-labs","import_time":"2026-09-24T08:47:41.238899885Z","modified_time":"2026-09-22T16:27:29Z"}]}},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:7464a4d0-5daf-4f0c-811c-c030864c8365","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MAL-2026-7788","advisory_id":"7464a4d0-5daf-4f0c-811c-c030864c8365","event_types":["advisory"],"published_at":"2026-10-24T22:26:24.157854+00:00","technologies":["core-osv","lambegitx4062"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-07-07T11:54:04+00:00","detail_url":"/events/6368"},"members":[{"id":6368,"cve_ids":[],"payload":{"kind":"advisory","title":"Malicious code in lambegitx4062 (RubyGems)","summary":"--- _-= Per source details. Do not edit below this line.=-_","evidence":"osv:MAL-2026-7788","products":[{"name":{"value":"lambegitx4062","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[{"value":"0.0.1","evidence":"/affected/0/versions"},{"value":"0.0.3","evidence":"/affected/0/versions"}]}],"severity":"unknown","structured":{"id":"MAL-2026-7788","aliases":["GHSA-2v82-pmqh-339h","MAL-2026-7788"],"affected":[{"package":{"name":"lambegitx4062","purl":"pkg:gem/lambegitx4062","ecosystem":"RubyGems"},"versions":["0.0.1","0.0.3"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/rubygems/lambegitx4062/MAL-2026-7788.json"}}],"modified":"2026-09-24T09:01:07.010817596Z","provider":"osv","references":["https://github.com/advisories/GHSA-2v82-pmqh-339h"],"provider_metadata":{"malicious-packages-origins":[{"id":"RLMA-2026-02446","sha256":"99bd20283ed4a8e3d9836ea79e4677f070a907686829df6984072cb13d4df016","source":"reversing-labs","versions":["0.0.1","0.0.3"],"import_time":"2026-07-09T09:12:15.863999958Z","modified_time":"2026-07-07T11:54:04Z"},{"id":"RLUA-2026-08261","sha256":"faed874908f38bee8aa0af795f50bff5c0c6f1c8cf4e04aa1906cf2fb57ab6e4","source":"reversing-labs","import_time":"2026-09-24T08:47:41.238899885Z","modified_time":"2026-09-22T16:27:29Z"}]}},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:7464a4d0-5daf-4f0c-811c-c030864c8365","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MAL-2026-7788","advisory_id":"7464a4d0-5daf-4f0c-811c-c030864c8365","event_types":["advisory"],"published_at":"2026-10-24T22:26:24.157854+00:00","technologies":["core-osv","lambegitx4062"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-07-07T11:54:04+00:00","detail_url":"/events/6368"}]}}],"next_after":6356,"next_before":6356}