THREATPKG
SYNC STALE
Supply-chain threat intelligence
Incident detail
criticalrubygems·credential theft·osv
Malicious code in knot-date-utils-rb (RubyGems)
Risk score
92
AI summary
Indexed incident for knot-date-utils-rb (rubygems).
Description
This package is a malicious packages part of the Go BufferZoneCorp and RubyGems knot-theory clusters.
The packages in this cluster steal credentials, set up ssh access and tamper with build/workflow environmetn variables.
Technical details
Indicators
- affected version<function fixed() { [native code] }75%
Timeline
- Advisory published
- Indexed by ThreatPkg
Related incidents
- Malicious code in bittensor-burn-watch (PyPI)bittensor-burn-watch92
- Malicious code in clip-logger (PyPI)clip-logger92
- Malicious code in executable-stories-jest (npm)executable-stories-jest92
- Malicious code in wrangler-deploy (npm)wrangler-deploy92
- Malicious code in node-env-resolver (npm)node-env-resolver92