{"id":"MAL-2024-6861","summary":"Malicious code in deriving-license (RubyGems)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n","aliases":["GHSA-fvfx-wj8f-pwc2"],"modified":"2026-07-23T07:54:52.084417573Z","published":"2024-06-25T13:50:34Z","database_specific":{"malicious-packages-origins":[{"versions":["0.3.1"],"source":"reversing-labs","sha256":"17b8f79b94191ab1d7fa9e78f569e9127ee10ac889a88bb3fb40cda8ec0a6b2f","import_time":"2024-06-28T02:52:27.904316153Z","id":"RLMA-2024-05667","modified_time":"2024-06-25T13:50:34Z"},{"modified_time":"2024-10-16T15:02:47Z","source":"reversing-labs","sha256":"b1d5e0562d4144736e0eb22a10d40b9b9e4381b56e9b1507e592808bd2a7e289","import_time":"2024-10-24T01:01:12.784129595Z","id":"RLUA-2024-10186"}]},"references":[{"type":"ARTICLE","url":"https://blog.reversinglabs.com/blog/mining-for-malicious-ruby-gems"}],"affected":[{"package":{"name":"deriving-license","ecosystem":"RubyGems","purl":"pkg:gem/deriving-license"},"versions":["0.3.1"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/rubygems/deriving-license/MAL-2024-6861.json"}}],"schema_version":"1.7.5","credits":[{"name":"ReversingLabs","contact":["https://www.reversinglabs.com"],"type":"FINDER"}]}