MAL-2023-1424

    Dashboard / Malicious Package / MAL-2023-1424

    MAL-2023-1424

    Published: 25 Apr 2023Last Modified: 23 Jul 2026Aliases: 
    GHSA-x4w6-f7v6-mqq3

    Summary: Malicious code in fluent-plugin-enhance-k8s-metadata (RubyGems)

    Details: Source: ossf-package-analysis (537d9d482d3e99b2757022edbff8c81e9a9bd9bf73f272f10634d355c813e635) The OpenSSF Package Analysis project identified 'fluent-plugin-enhance-k8s-metadata' @ 5.0.1 (rubygems) as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity.

    References:

    Affected packages

    Package

    Name: fluent-plugin-enhance-k8s-metadata

    Purl: pkg:gem/fluent-plugin-enhance-k8s-metadata

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    5.0.1
    MAL-2023-1424 | CVE-DB