MAL-2026-906

    Dashboard / Malicious Package / MAL-2026-906

    MAL-2026-906

    Published: 15 Feb 2026Last Modified: 23 Jul 2026Aliases: 
    GHSA-mg5m-qmr9-mphv

    Summary: Malicious code in cucumber_json_schema (RubyGems)

    Details: Source: ossf-package-analysis (f6511110b5695ace5b67288aeb0800934628b5a510045ccf1f62c84011e73951) The OpenSSF Package Analysis project identified 'cucumber_json_schema' @ 90002.0 (rubygems) as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity.

    References:

    Affected packages

    Package

    Name: cucumber_json_schema

    Purl: pkg:gem/cucumber_json_schema

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    90002.0
    MAL-2026-906 | CVE-DB