{"id":"MAL-2024-6912","summary":"Malicious code in fluent_plugin-statsite (RubyGems)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n","aliases":["GHSA-g94c-vjcp-5px3"],"modified":"2026-07-23T07:55:00.342276954Z","published":"2024-06-25T13:51:03Z","database_specific":{"malicious-packages-origins":[{"id":"RLMA-2024-05718","modified_time":"2024-06-25T13:51:03Z","versions":["0.0.7"],"source":"reversing-labs","sha256":"aa2fce9bb4c4db4f419faf2fea2a80343f3d8232208527ab4866b363204db1a0","import_time":"2024-06-28T02:52:33.897472263Z"},{"id":"RLUA-2024-10237","modified_time":"2024-10-16T15:03:23Z","source":"reversing-labs","sha256":"a8b125a22457f55c298338df73dfdc5e9aaa6fed9906c31644f07b2906bcfdab","import_time":"2024-10-24T01:01:16.379671337Z"}]},"references":[{"type":"ARTICLE","url":"https://blog.reversinglabs.com/blog/mining-for-malicious-ruby-gems"}],"affected":[{"package":{"name":"fluent_plugin-statsite","ecosystem":"RubyGems","purl":"pkg:gem/fluent_plugin-statsite"},"versions":["0.0.7"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/rubygems/fluent_plugin-statsite/MAL-2024-6912.json"}}],"schema_version":"1.7.5","credits":[{"name":"ReversingLabs","contact":["https://www.reversinglabs.com"],"type":"FINDER"}]}