Benign gem 22,953,417 installs Download

hanami-utils 2.2.0.beta2

Legitimate Ruby gem

“Ruby core extentions and Hanami utilities”

Ruby subshell command executionCode embeds cleartext HTTP URL literal

SHA-2569843d35b0e426a3277e3b2921fa689b61ac27dd55e88fa02b65cfe5c37ad1915

URLhttps://rubygems.org/downloads/hanami-utils-2.2.0.beta2.gem

MaleculeH₄(Cm₂DbF₂Po₂)Md(Pa)

Evidence

Ruby gemspec assigns package name hanami-utils.gemspec · lines 1–11

⋯4 lines
5require "hanami/utils/version"
6
7Gem::Specification.new do |spec|
8  spec.name          = "hanami-utils"
9  spec.version       = Hanami::Utils::VERSION
10  spec.authors       = ["Luca Guidi"]
11  spec.email         = ["me@ …

Code embeds cleartext HTTP URL literal hanami-utils.gemspec · lines 12–20

40… s"
spec.summary       = "Ruby core extentions and Hanami utilities"
spec.homepage      = "http://hanamirb.org"
spec.license       = "MIT"
16
spec.files         = `git ls-files -- lib/* CHANGELOG.md LICENSE.md README.md hanami-utils.gemspec`.split($/)
spec.executables   = spec.files.grep(%r{^bin/}) { |f| File.basename(f) }
spec.require_paths = ["lib"]
spec.meta …

Ruby class_eval call class_attribute.rb · lines 19–28

5…   module ClassMethods
      def self.extended(base)
        base.class_eval do
          @__class_attributes = Attributes.new unless defined?(@__class_attributes)
        end
      end
25
      # Defines a class level accessor for the given attribute(s).
      #
      # A value set for a superclass is automatically available …

Copies a file with Ruby FileUtils files.rb · lines 45–52

13… lf.cp(source, destination)
      mkdir_p(destination)
      FileUtils.cp(source, destination)
    end
49
    # Creates a directory for the given path.
    # It assumes that all the tokens in `path` are meant to be a directory.
    # All the intermediate directories  …

Ruby creates a directory tree files.rb · lines 68–74

29…  `path/to/file.rb` directory
    def self.mkdir(path)
      FileUtils.mkdir_p(path)
    end
72
    # Creates a directory for the given path.
    # It assumes that all the tokens, but the last, in `path` …

No evidence locations were recorded for this file. Raw result