PRIMARY-SOURCE REVIEW · 2026-11-03T16:20:00+09:00

RubyGems: 3 malicious-package advisories; check affected releases

The publication window contains 3 RubyGems malware advisories. This counts advisories, not machines or compromises. The table preserves package names and affected ranges from the original API; an unlisted first fix is not replaced with an assumed safe release.

What to check

Check installation and execution history, lockfiles and distributed images. Isolate affected environments and revoke and reissue keys from a separate clean environment. Removal alone does not establish that persistence is gone; rebuild and investigate logs.

A first fixed version is listed only when the advisory provides one. Advisory counts are not incident counts.

Affected and fixed versions by advisory (3)

GHSA-8v7q-mrx4-jvfg

Malicious code in dopc-client (RubyGems)

  • dopc-client (rubygems): affected = 1.0.0 → fixed No fixed version listed
  • dopc-client (rubygems): affected = 10.0.0 → fixed No fixed version listed

GHSA-x49r-jpx2-h4h9

Malicious code in shoaib-unity (RubyGems)

  • shoaib-unity (rubygems): affected = 1.0.1 → fixed No fixed version listed

GHSA-ppjw-cwjq-6w82

Malicious code in intercom-react-native-example-e2e-tests (RubyGems)

  • intercom-react-native-example-e2e-tests (rubygems): affected = 1.0.1 → fixed No fixed version listed

Primary sources

GHSA-8v7q-mrx4-jvfg / GHSA-x49r-jpx2-h4h9 / GHSA-ppjw-cwjq-6w82

Related topics

DBHub: MySQL/MariaDB read-only bypass fixed in 0.22.6 · SD-JWT: silently discarded disclosures can change authorization · npm: 92 malicious-package advisories; check affected releases · PyPI: 2 malicious-package advisories; check affected releases