{"id":"MAL-2025-46963","summary":"Malicious code in s4-client (RubyGems)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ossf-package-analysis (4b0ff124956b3356a75ab19d9e7f2bddfa64f0afa017c20f34899c963fbb6be0)\nThe OpenSSF Package Analysis project identified 's4-client' @ 1.2.1.r10ab0de (rubygems) as malicious.\n\nIt is considered malicious because:\n\n- The package executes one or more commands associated with malicious behavior.\n","aliases":["GHSA-wgwq-675q-4fwc"],"modified":"2026-07-23T07:56:01.722115975Z","published":"2025-09-01T09:52:56Z","database_specific":{"malicious-packages-origins":[{"modified_time":"2025-09-01T09:52:56Z","sha256":"4b0ff124956b3356a75ab19d9e7f2bddfa64f0afa017c20f34899c963fbb6be0","source":"ossf-package-analysis","versions":["1.2.1.r10ab0de"],"import_time":"2025-09-08T04:38:18.657335286Z"}]},"affected":[{"package":{"name":"s4-client","ecosystem":"RubyGems","purl":"pkg:gem/s4-client"},"versions":["1.2.1.r10ab0de"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/rubygems/s4-client/MAL-2025-46963.json"}}],"schema_version":"1.7.5","credits":[{"name":"OpenSSF: Package Analysis","contact":["https://github.com/ossf/package-analysis","https://openssf.slack.com/channels/package_analysis"],"type":"FINDER"}]}