VDB
KO

MAL-2026-9042

Malicious code in uxds124873 (RubyGems)

Details

--- _-= Per source details. Do not edit below this line.=-_

## Source: ghsa-malware (888c9f2be28f6ebf5a79f044972bd31892fa3f15ec28257741673a25a35583d0) ---

Credit: [OpenSSF](https://github.com/ossf/malicious-packages) ([source](https://github.com/ossf/malicious-packages/blob/9fbb5fba02ba2f02395d3d2d43c31b2c482b7a9d/osv/malicious/rubygems/uxds124873/MAL-2026-9042.json))

Are you affected?

Enter the version of the package you're using.

Affected packages

RubyGems / uxds124873

No fixed version published yet for uxds124873 (bundler). Pin to a known-safe version or switch to an alternative.

References