{"id":"MAL-2024-7834","summary":"Malicious code in melio-platform-api-client (RubyGems)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ossf-package-analysis (cb4e0efafa3bf0645819f2aa88cfdc7778f938470c0984afc5e1f1504df982aa)\nThe OpenSSF Package Analysis project identified 'melio-platform-api-client' @ 5.0.0 (rubygems) as malicious.\n\nIt is considered malicious because:\n\n- The package communicates with a domain associated with malicious activity.\n","aliases":["GHSA-6m65-49xq-pfxj"],"modified":"2026-09-24T09:01:53.262183330Z","published":"2024-07-28T23:15:41Z","database_specific":{"malicious-packages-origins":[{"versions":["5.0.0"],"import_time":"2024-07-28T23:33:52.252012045Z","modified_time":"2024-07-28T23:15:41Z","sha256":"cb4e0efafa3bf0645819f2aa88cfdc7778f938470c0984afc5e1f1504df982aa","source":"ossf-package-analysis"},{"modified_time":"2024-10-16T15:04:22Z","sha256":"3a2b123e03a1e782c385419aff070781610593da7fef94b4d548673d591615cd","source":"reversing-labs","versions":["3.0.1","3.1.1","3.1.2","3.1.4","4.4.4","4.4.5","4.4.6","5.0.0","5.0.1"],"id":"RLMA-2024-10315","import_time":"2024-10-24T00:57:13.045934193Z"},{"modified_time":"2026-09-22T16:31:52Z","sha256":"4ebd9a2e7736a03ad1a45921cb2ca0ffe0fe6831b41ed031176508b69039d2e9","source":"reversing-labs","id":"RLUA-2026-08591","import_time":"2026-09-24T08:48:07.540176627Z"}]},"references":[{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-6m65-49xq-pfxj"}],"affected":[{"package":{"name":"melio-platform-api-client","ecosystem":"RubyGems","purl":"pkg:gem/melio-platform-api-client"},"versions":["5.0.0","3.0.1","3.1.1","3.1.2","3.1.4","4.4.4","4.4.5","4.4.6","5.0.1"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/rubygems/melio-platform-api-client/MAL-2024-7834.json"}}],"schema_version":"1.9.0","credits":[{"name":"OpenSSF: Package Analysis","contact":["https://github.com/ossf/package-analysis","https://openssf.slack.com/channels/package_analysis"],"type":"FINDER"},{"name":"ReversingLabs","contact":["https://www.reversinglabs.com"],"type":"FINDER"}]}