Benign gem 22,953,417 installs Download

hanami-utils 2.0.0

Legitimate Ruby gem

“Ruby core extentions and Hanami utilities”

Ruby subshell command executionCode embeds cleartext HTTP URL literal

SHA-2568b6fc583a3f0f92b9e29799dc204b9f354981771c13df029ef4d7981e1e0be2f

URLhttps://rubygems.org/downloads/hanami-utils-2.0.0.gem

MaleculeH₄(Cm₂DbF₂Po₂)Md(Pa)

Evidence

Ruby gemspec assigns package name hanami-utils.gemspec · lines 1–11

⋯4 lines
5require "hanami/utils/version"
6
7Gem::Specification.new do |spec|
8  spec.name          = "hanami-utils"
9  spec.version       = Hanami::Utils::VERSION
10  spec.authors       = ["Luca Guidi"]
11  spec.email         = ["me@ …

Code embeds cleartext HTTP URL literal hanami-utils.gemspec · lines 12–20

40… s"
spec.summary       = "Ruby core extentions and Hanami utilities"
spec.homepage      = "http://hanamirb.org"
spec.license       = "MIT"
16
spec.files         = `git ls-files -- lib/* CHANGELOG.md LICENSE.md README.md hanami-utils.gemspec`.split($/)
spec.executables   = spec.files.grep(%r{^bin/}) { |f| File.basename(f) }
spec.require_paths = ["lib"]
spec.meta …

Ruby class_eval call class_attribute.rb · lines 19–28

5…   module ClassMethods
      def self.extended(base)
        base.class_eval do
          @__class_attributes = Attributes.new unless defined?(@__class_attributes)
        end
      end
25
      # Defines a class level accessor for the given attribute(s).
      #
      # A value set for a superclass is automatically available …

References a public code-forge URL escape.rb · lines 13–22

90… eet
  # @see https://www.owasp.org/index.php/ESAPI
  # @see https://github.com/ESAPI/esapi-java-legacy
  module Escape # rubocop:disable Metrics/ModuleLength
    # Hex base for base 10 integer conversion
    #
    # @since 0.4.0
    # @api private
    #
    # @s …

Ruby dynamically resolves a constant class.rb · lines 39–46

62… ameError
    def self.load!(name, namespace = Object)
      namespace.const_get(name.to_s, false)
    end
43
    # Loads a class for the given name, only if it's defined.
    #
    # @param n …

No evidence locations were recorded for this file. Raw result