MAL-2025-6348

    Dashboard / Malicious Package / MAL-2025-6348

    MAL-2025-6348

    Published: 30 Jul 2025Last Modified: 23 Jul 2026Aliases: 
    GHSA-pmfx-6mmf-ph4x

    Summary: Malicious code in resource_registry (RubyGems)

    Details: Source: ossf-package-analysis (97ad7e4a2d8c7feaee7f61db0f1f57c90f92b4f92d6ca258fef4bc5f5107666d) The OpenSSF Package Analysis project identified 'resource_registry' @ 1.0.22 (rubygems) as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity.

    References:

    Affected packages

    Package

    Name: resource_registry

    Purl: pkg:gem/resource_registry

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    0.0.1
    MAL-2025-6348 | CVE-DB