{"id":"MAL-2025-2209","summary":"Malicious code in poc-by-shahwar (RubyGems)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ossf-package-analysis (6381347b8b3c6e2f8f2d7aa1b39647e7f7444e10122cd821b80ae6b3d05c5a7e)\nThe OpenSSF Package Analysis project identified 'poc-by-shahwar' @ 0.1.0 (rubygems) as malicious.\n\nIt is considered malicious because:\n\n- The package communicates with a domain associated with malicious activity.\n\n- The package executes one or more commands associated with malicious behavior.\n","aliases":["GHSA-9hxq-x27p-fv9c"],"modified":"2026-07-23T07:55:56.160231464Z","published":"2025-03-06T19:56:06Z","database_specific":{"malicious-packages-origins":[{"modified_time":"2025-03-06T19:56:06Z","sha256":"6381347b8b3c6e2f8f2d7aa1b39647e7f7444e10122cd821b80ae6b3d05c5a7e","source":"ossf-package-analysis","versions":["0.1.0"],"import_time":"2025-03-06T20:06:12.40201731Z"}]},"affected":[{"package":{"name":"poc-by-shahwar","ecosystem":"RubyGems","purl":"pkg:gem/poc-by-shahwar"},"versions":["0.1.0"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/rubygems/poc-by-shahwar/MAL-2025-2209.json"}}],"schema_version":"1.7.5","credits":[{"name":"OpenSSF: Package Analysis","contact":["https://github.com/ossf/package-analysis","https://openssf.slack.com/channels/package_analysis"],"type":"FINDER"}]}