VDB
KO

MAL-2026-9528

Malicious code in xla01778568189 (RubyGems)

Details

--- _-= Per source details. Do not edit below this line.=-_

## Source: ghsa-malware (dc6442e78b1ef0aa91bdba9190d4471d2c54f3c03fc4417fb8db34f9ff7bf4fe) ---

Credit: [OpenSSF](https://github.com/ossf/malicious-packages) ([source](https://github.com/ossf/malicious-packages/blob/9fbb5fba02ba2f02395d3d2d43c31b2c482b7a9d/osv/malicious/rubygems/xla01778568189/MAL-2026-9528.json))

Are you affected?

Enter the version of the package you're using.

Affected packages

RubyGems / xla01778568189

No fixed version published yet for xla01778568189 (bundler). Pin to a known-safe version or switch to an alternative.

References