VDB
KO

MAL-2026-9342

Malicious code in wgsfosmgcal2 (RubyGems)

Details

--- _-= Per source details. Do not edit below this line.=-_

## Source: ghsa-malware (35ac4321afec14b446464c4e9b2ecfa55850834a6f2705cad60c2404695446c1) ---

Credit: [OpenSSF](https://github.com/ossf/malicious-packages) ([source](https://github.com/ossf/malicious-packages/blob/9fbb5fba02ba2f02395d3d2d43c31b2c482b7a9d/osv/malicious/rubygems/wgsfosmgcal2/MAL-2026-9342.json))

Are you affected?

Enter the version of the package you're using.

Affected packages

RubyGems / wgsfosmgcal2

No fixed version published yet for wgsfosmgcal2 (bundler). Pin to a known-safe version or switch to an alternative.

References