{"schema_version":"1","data":[{"id":6743,"advisory_id":"0d1917d9-194c-45f3-b222-116a98fc5d6b","revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MAL-2026-7947","source_published_at":"2026-07-07T11:55:35+00:00","published_at":"2026-10-24T22:32:51.163805+00:00","extraction_method":"structured","technologies":["core-osv","lbrssltutuvwp"],"cve_ids":[],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Malicious code in lbrssltutuvwp (RubyGems)","summary":"--- _-= Per source details. Do not edit below this line.=-_","evidence":"osv:MAL-2026-7947","products":[{"name":{"value":"lbrssltutuvwp","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[{"value":"0.0.1","evidence":"/affected/0/versions"}]}],"severity":"unknown","structured":{"id":"MAL-2026-7947","aliases":["GHSA-mpch-42qp-6frj","MAL-2026-7947"],"affected":[{"package":{"name":"lbrssltutuvwp","purl":"pkg:gem/lbrssltutuvwp","ecosystem":"RubyGems"},"versions":["0.0.1"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/rubygems/lbrssltutuvwp/MAL-2026-7947.json"}}],"modified":"2026-09-24T09:01:40.456860344Z","provider":"osv","references":["https://github.com/advisories/GHSA-mpch-42qp-6frj"],"provider_metadata":{"malicious-packages-origins":[{"id":"RLMA-2026-02598","sha256":"4d5ad547912ac45132e41f31b1d9a695a2a6914ad7fdbd147c21678c24ca85b3","source":"reversing-labs","versions":["0.0.1"],"import_time":"2026-07-09T09:12:32.252183362Z","modified_time":"2026-07-07T11:55:35Z"},{"id":"RLUA-2026-08415","sha256":"ff6be5dc3781ba932f11e5bbe04e365f02e24e3a1dcf2bd9be023b440ae5faf8","source":"reversing-labs","import_time":"2026-09-24T08:47:53.566449752Z","modified_time":"2026-09-22T16:29:31Z"}]}},"related_cves":[],"security_relevant":true,"severity_evidence":null}}],"next_after":6743,"next_before":6743}