Fallout in ruby, Aug 17 – Aug 23

What we caught this week while monitoring over 163,309,944 artifacts across 47 ecosystems. Campaigns that impact multiple packages are collapsed into a single entry with their siblings.

TUESDAY

Tue Aug 18 · 3 catches · 0 waves · 3 singles

37d

dionysus-rb 1.1.0 ruby 4,006 installs 37 days ago

pg gem contains reverse shell

depends on hostile gem: pg v1.3.5

37d

ouroboros-peatio-electrum 2.6.10 ruby 292 installs 37 days ago

HTTP desync probe in dependency

depends on hostile gem: http_parser.rb v0.6.0 depends on suspicious gem: concurrent-ruby v1.1.9

37d

ouroboros-peatio-dash 3.1.0 ruby 143 installs 37 days ago

HTTP desync probe in dependency

depends on hostile gem: http_parser.rb v0.8.0

O objectives H behaviours Md metadata · a group subscript counts categories, an atom subscript subcategories