{"id":"MAL-2023-1433","summary":"Malicious code in puppet-module-posix-system-r (RubyGems)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ossf-package-analysis (2ad3a13f7c087320a9f4bf76203fd40172a2b55172dec3ac957ad4d265c01425)\nThe OpenSSF Package Analysis project identified 'puppet-module-posix-system-r' @ 1.0.0 (rubygems) as malicious.\n\nIt is considered malicious because:\n- The package communicates with a domain associated with malicious activity.\n","aliases":["GHSA-83gv-cxp8-4pmj"],"modified":"2026-07-23T07:55:58.097038181Z","published":"2023-08-09T17:50:27Z","database_specific":{"malicious-packages-origins":[{"modified_time":"2023-08-09T17:50:27.34728487Z","sha256":"2ad3a13f7c087320a9f4bf76203fd40172a2b55172dec3ac957ad4d265c01425","source":"ossf-package-analysis","versions":["1.0.0"],"import_time":"2023-08-10T06:17:38.982817921Z"}]},"affected":[{"package":{"name":"puppet-module-posix-system-r","ecosystem":"RubyGems","purl":"pkg:gem/puppet-module-posix-system-r"},"versions":["1.0.0"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/rubygems/puppet-module-posix-system-r/MAL-2023-1433.json"}}],"schema_version":"1.7.5","credits":[{"name":"OpenSSF: Package Analysis","contact":["https://github.com/ossf/package-analysis","https://openssf.slack.com/channels/package_analysis"],"type":"FINDER"}]}