MAL-2025-3295

    Dashboard / Malicious Package / MAL-2025-3295

    MAL-2025-3295

    Published: 24 Apr 2025Last Modified: 23 Jul 2026Aliases: 
    GHSA-x898-3p28-j8r4

    Summary: Malicious code in bvr-api (RubyGems)

    Details: Source: ossf-package-analysis (ed2a0f9c584ecfcffc1c76619a1637559d1d8771f78e1d3655f819f7fff67962) The OpenSSF Package Analysis project identified 'bvr-api' @ 0.3.12 (rubygems) as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity.

    References:

    Affected packages

    Package

    Name: bvr-api

    Purl: pkg:gem/bvr-api

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    0.3.12