{"id":"MAL-2024-6940","summary":"Malicious code in has-changelogs (RubyGems)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n","aliases":["GHSA-qhc3-g4jq-5v5q"],"modified":"2026-07-23T07:55:05.777005782Z","published":"2024-06-25T13:51:20Z","database_specific":{"malicious-packages-origins":[{"import_time":"2024-06-28T02:52:37.033606844Z","id":"RLMA-2024-05746","modified_time":"2024-06-25T13:51:20Z","versions":["0.2.0"],"source":"reversing-labs","sha256":"868ec663ee29a7175a99bab332e6bcc358f78dc02d404d38bcc3c42dba5684dd"},{"source":"reversing-labs","sha256":"57652ff5cc9ef54c6b1c39e0cb902f11527fbc2000f6301ba9b7f5cf1c30d477","import_time":"2024-10-24T01:01:18.448397676Z","id":"RLUA-2024-10265","modified_time":"2024-10-16T15:03:46Z"}]},"references":[{"type":"ARTICLE","url":"https://blog.reversinglabs.com/blog/mining-for-malicious-ruby-gems"}],"affected":[{"package":{"name":"has-changelogs","ecosystem":"RubyGems","purl":"pkg:gem/has-changelogs"},"versions":["0.2.0"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/rubygems/has-changelogs/MAL-2024-6940.json"}}],"schema_version":"1.7.5","credits":[{"name":"ReversingLabs","contact":["https://www.reversinglabs.com"],"type":"FINDER"}]}