{"schema_version":"1","data":[{"id":6580,"advisory_id":"54eb11a7-3f24-4e8d-8df3-2d919a6b3503","revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MAL-2024-7007","source_published_at":"2024-06-25T13:52:01+00:00","published_at":"2026-10-24T22:30:02.848456+00:00","extraction_method":"structured","technologies":["core-osv","rack-envinspector"],"cve_ids":[],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Malicious code in rack_envinspector (RubyGems)","summary":"--- _-= Per source details. Do not edit below this line.=-_","evidence":"osv:MAL-2024-7007","products":[{"name":{"value":"rack_envinspector","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[{"value":"0.1","evidence":"/affected/0/versions"}]}],"severity":"unknown","structured":{"id":"MAL-2024-7007","aliases":["GHSA-2fgg-6vc4-ch7w","MAL-2024-7007"],"affected":[{"package":{"name":"rack_envinspector","purl":"pkg:gem/rack_envinspector","ecosystem":"RubyGems"},"versions":["0.1"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/rubygems/rack_envinspector/MAL-2024-7007.json"}}],"modified":"2026-09-24T09:01:25.980017244Z","provider":"osv","references":["https://blog.reversinglabs.com/blog/mining-for-malicious-ruby-gems","https://github.com/advisories/GHSA-2fgg-6vc4-ch7w"],"provider_metadata":{"malicious-packages-origins":[{"id":"RLMA-2024-05812","sha256":"9ecfdd41ced16a2024b19a680f99e14fc38211b13f95e6be44c3d5da87fec7c4","source":"reversing-labs","versions":["0.1"],"import_time":"2024-06-28T02:52:44.716440732Z","modified_time":"2024-06-25T13:52:01Z"},{"id":"RLUA-2024-10333","sha256":"1ef9508b74027d8139c1801adddb25cd0f05b9a446978de1eb7d6469d0df2ed8","source":"reversing-labs","import_time":"2024-10-24T01:01:22.886107956Z","modified_time":"2024-10-16T15:04:35Z"},{"id":"RLUA-2026-09024","sha256":"b9042c4333f59f2b72f5b84285eb0b22b9742717e349d001ce68461f963ba43a","source":"reversing-labs","import_time":"2026-09-24T08:48:42.131829322Z","modified_time":"2026-09-22T16:37:53Z"}]}},"related_cves":[],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"context_update":false}],"next_after":6580,"next_before":6580}