VYPR
← All malware advisories

gem · Malicious package advisory

Malware

wurl_show_data

MAL-2026-16466

Malicious code in wurl_show_data (RubyGems)

Details


---
_-= Per source details. Do not edit below this line.=-_

## Source: ossf-package-analysis (17d2e80b42383fadbe9bde12ef17decad8b9dfa9b48f93b6e7f9162091e2a69d)
The OpenSSF Package Analysis project identified 'wurl_show_data' @ 3.1.42.99 (rubygems) as malicious.

It is considered malicious because:

- The package executes one or more commands associated with malicious behavior.

Compromised versions (1)

  • 3.1.42.99

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.