{"id":"MAL-2025-46922","summary":"Malicious code in spamurai-dev-kit (RubyGems)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ossf-package-analysis (6809fd87c593e76bcb0bd4a719cab9e51e2d3b617f9a172d0a8a2f68a09474e7)\nThe OpenSSF Package Analysis project identified 'spamurai-dev-kit' @ 3.0.1 (rubygems) as malicious.\n\nIt is considered malicious because:\n\n- The package executes one or more commands associated with malicious behavior.\n","aliases":["GHSA-hgp4-5vmm-575j"],"modified":"2026-07-23T07:56:09.097070302Z","published":"2025-09-01T09:50:32Z","database_specific":{"malicious-packages-origins":[{"import_time":"2025-09-08T03:43:53.209617433Z","modified_time":"2025-09-01T09:50:32Z","sha256":"6809fd87c593e76bcb0bd4a719cab9e51e2d3b617f9a172d0a8a2f68a09474e7","source":"ossf-package-analysis","versions":["3.0.1"]}]},"affected":[{"package":{"name":"spamurai-dev-kit","ecosystem":"RubyGems","purl":"pkg:gem/spamurai-dev-kit"},"versions":["3.0.1"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/rubygems/spamurai-dev-kit/MAL-2025-46922.json"}}],"schema_version":"1.7.5","credits":[{"name":"OpenSSF: Package Analysis","contact":["https://github.com/ossf/package-analysis","https://openssf.slack.com/channels/package_analysis"],"type":"FINDER"}]}