{"schema_version":"1","data":[{"id":6725,"advisory_id":"77f6913d-784d-417e-ba2d-42986b8411f6","revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MAL-2026-7902","source_published_at":"2026-07-07T11:55:06+00:00","published_at":"2026-10-24T22:32:40.235218+00:00","extraction_method":"structured","technologies":["core-osv","lat2cal1"],"cve_ids":[],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Malicious code in lat2cal1 (RubyGems)","summary":"--- _-= Per source details. Do not edit below this line.=-_","evidence":"osv:MAL-2026-7902","products":[{"name":{"value":"lat2cal1","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[{"value":"0.0.2","evidence":"/affected/0/versions"}]}],"severity":"unknown","structured":{"id":"MAL-2026-7902","aliases":["GHSA-jqmw-6w52-8289","MAL-2026-7902"],"affected":[{"package":{"name":"lat2cal1","purl":"pkg:gem/lat2cal1","ecosystem":"RubyGems"},"versions":["0.0.2"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/rubygems/lat2cal1/MAL-2026-7902.json"}}],"modified":"2026-09-24T09:01:39.126274016Z","provider":"osv","references":["https://github.com/advisories/GHSA-jqmw-6w52-8289"],"provider_metadata":{"malicious-packages-origins":[{"id":"RLMA-2026-02553","sha256":"640d43bab4abc1998c08bec353c1ec686a09597b90ce0a98d9f70273c5c11b2d","source":"reversing-labs","versions":["0.0.2"],"import_time":"2026-07-09T09:12:27.237780738Z","modified_time":"2026-07-07T11:55:06Z"},{"id":"RLUA-2026-08370","sha256":"627af6da9650439272147d6b8132dc066bac1b086e03347814f850a34e546f16","source":"reversing-labs","import_time":"2026-09-24T08:47:49.822691667Z","modified_time":"2026-09-22T16:28:55Z"}]}},"related_cves":[],"security_relevant":true,"severity_evidence":null}}],"next_after":6725,"next_before":6725}