Benign gem 1,344,504 installs Download

miasma 0.2.32

Legitimate API client gem

“Smoggy API”

Code embeds cleartext HTTP URL literalReferences a public code-forge URL

SHA-25632bf7137a80fb58e5f02dd9b683e0f5c0cb8e58ea8a54835414dcdfdf2ca8c04

URLhttps://rubygems.org/downloads/miasma-0.2.32.gem

MaleculeH₄(Cm₂DbF₂Po₂)Md(Pa)

Evidence

Enumerates files with a recursive Ruby glob miasma-test · lines 20–32

20:27… led to locate expected spec directory! (#{library_spec_dir})"
21  exit -1
22end
23
24if(ARGV.empty?)
25  cassette_directory = File.join(library_spec_dir, 'cassettes')
26
27  Dir.glob(File.join(library_spec_dir, '**/**/*_spec.rb')).each do |path|
28    require File.expand_path(path)
29  end
30
31else
32  cassette_directory = File.join(library_spec_dir, ' …

Ruby creates a directory tree miasma-test · lines 39–51

⋯5 lines
44end
45
46FileUtils.mkdir_p(cassette_directory)
47
48VCR.configure do |c|
49  c.cassette_library_dir = cassette_directory
50  c.hook_into :webmock
51end

Ruby dynamically resolves a constant resource.rb · lines 30–38

37… , 2)
          # Insert mapping constant name and fetch
         const = provider_const.push(:RESOURCE_MAPPING).inject(Object) do |memo, konst|
            res = memo.const_get(konst)
            break unless res
            res
          end
          unless(const[self.type])
            …

Ruby rebinds a method with alias_method resource.rb · lines 46–57

        def expand
          info = dereference
          api.api_for(info[:api]).send(info[:collection]).get(self.id)
        end
        alias_method :instance, :expand
51
        # Proxy reload action up to the API
        def perform_reload
          api.resource_reload(self)
        end
56
        …

Ruby dynamically invokes a method with send file.rb · lines 25–33

52… lock)
          if(io.respond_to?(method_name))
            io.send(method_name, *args, &block)
          else
            raise
⋯4 lines

No evidence locations were recorded for this file. Raw result