MAL-2026-17104

    Dashboard / Malicious Package / MAL-2026-17104

    MAL-2026-17104

    Published: 22 Sept 2026Last Modified: 24 Sept 2026

    Summary: Malicious code in bunndler (RubyGems)

    References: https://github.com/rubygems/rubygems.org/wiki/Gems-yanked-and-accounts-locked#20-july-2019

    Affected packages

    Package

    Name: bunndler

    Purl: pkg:gem/bunndler

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    1.0.77086