THREATPKG
SYNC STALE
Supply-chain threat intelligence
Incident detail
criticalrubygems·credential theft·osv
Malicious code in knot-simple-formatter (RubyGems)
Risk score
92
AI summary
Indexed incident for knot-simple-formatter (rubygems).
Description
-= Per source details. Do not edit below this line.=-
Source: google-open-source-security (a4e4f74e90479d472a307d311d48214827e21cf93ecf9b0b62ff2cb72adb2c9e)
This package is a malicious packages part of the Go BufferZoneCorp and RubyGems knot-theory clusters.
The packages in this cluster steal credentials, set up ssh access and tamper with build/workflow environmetn variables.
Technical details
Affected versions
<function fixed() {
[native code]
}
Indicators
- affected_version<function fixed() { [native code] }75%
Timeline
- Advisory published
- Indexed by ThreatPkg