deriving-license

{"schema_version":"1.7.4","id":"MAL-2024-6861","published":"2024-06-25T13:50:34Z","modified":"2026-09-24T08:53:02.114186716Z","aliases":["GHSA-fvfx-wj8f-pwc2"],"summary":"Malicious code in deriving-license (RubyGems)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n","affected":[{"package":{"name":"deriving-license","ecosystem":"RubyGems","purl":"pkg:gem/deriving-license"},"versions":["0.3.1"]}],"references":[{"type":"ARTICLE","url":"https://blog.reversinglabs.com/blog/mining-for-malicious-ruby-gems"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-fvfx-wj8f-pwc2"}],"database_specific":{"malicious-packages-origins":[{"id":"RLMA-2024-05667","import_time":"2024-06-28T02:52:27.904316153Z","modified_time":"2024-06-25T13:50:34Z","sha256":"17b8f79b94191ab1d7fa9e78f569e9127ee10ac889a88bb3fb40cda8ec0a6b2f","source":"reversing-labs","versions":["0.3.1"]},{"id":"RLUA-2024-10186","import_time":"2024-10-24T01:01:12.784129595Z","modified_time":"2024-10-16T15:02:47Z","sha256":"b1d5e0562d4144736e0eb22a10d40b9b9e4381b56e9b1507e592808bd2a7e289","source":"reversing-labs"},{"id":"RLUA-2026-07972","import_time":"2026-09-24T08:47:18.024106042Z","modified_time":"2026-09-22T16:23:30Z","sha256":"fac8c26d8208213e4fea746954880bc50f6824ae2e171612a3bfd949fa753081","source":"reversing-labs"}]},"credits":[{"name":"ReversingLabs","contact":["https://www.reversinglabs.com"],"type":"FINDER"}]}