{"id":"MAL-2025-191667","summary":"Malicious code in pg_result_init (RubyGems)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ossf-package-analysis (007d07edb120233aab0539e4646e8b634d2a95e2df9e6179bb9b2b6eb90f5a97)\nThe OpenSSF Package Analysis project identified 'pg_result_init' @ 2.0.9 (rubygems) as malicious.\n\nIt is considered malicious because:\n\n- The package communicates with a domain associated with malicious activity.\n","aliases":["GHSA-wq5q-x686-23m4"],"modified":"2026-07-23T07:55:25.484859061Z","published":"2025-12-02T15:12:02Z","database_specific":{"malicious-packages-origins":[{"modified_time":"2025-12-02T15:12:02Z","sha256":"007d07edb120233aab0539e4646e8b634d2a95e2df9e6179bb9b2b6eb90f5a97","source":"ossf-package-analysis","versions":["2.0.9"],"import_time":"2025-12-02T15:40:15.447005663Z"}]},"affected":[{"package":{"name":"pg_result_init","ecosystem":"RubyGems","purl":"pkg:gem/pg_result_init"},"versions":["2.0.9"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/rubygems/pg_result_init/MAL-2025-191667.json"}}],"schema_version":"1.7.5","credits":[{"name":"OpenSSF: Package Analysis","contact":["https://github.com/ossf/package-analysis","https://openssf.slack.com/channels/package_analysis"],"type":"FINDER"}]}