Supply Chain Incidents

MAL-2023-1423

Malicious code in att-codekit (RubyGems)

MAL-2023-1432

Malicious code in ptrsec_rce (RubyGems)

MAL-2023-1427

Malicious code in i18n_sonder (RubyGems)

MAL-2023-1428

Malicious code in mandrill-api-ruby (RubyGems)

MAL-2023-1429

Malicious code in modified_bayes (RubyGems)

MAL-2023-11

Malicious code in microsoft_kiota_http (RubyGems)

MAL-2023-12

Malicious code in tzinfo-i18n (RubyGems)

MAL-2023-1424

Malicious code in fluent-plugin-enhance-k8s-metadata (RubyGems)

GHSA-vr22-43gj-rx3f

omniauth-weibo-oauth2 included a code-execution backdoor inserted by a third party

GHSA-q2hm-gx3f-h63q

Backdoor / Malicious code

GHSA-rqp5-pg7w-832p

datagrid contains code Injection backdoor

GHSA-wg6j-r28m-7293

Code backdoor in simple_captcha2

GHSA-4g4c-8gqh-m4vm

paranoid2 gem Code backdoor

GHSA-vqqv-v9m2-48p2

Bootstrap-sass contains code execution backdoor