melio-platform-api-client

{"schema_version":"1.7.4","id":"MAL-2024-7834","published":"2024-07-28T23:15:41Z","modified":"2026-09-24T08:53:02.813145294Z","aliases":["GHSA-6m65-49xq-pfxj"],"summary":"Malicious code in melio-platform-api-client (RubyGems)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ossf-package-analysis (cb4e0efafa3bf0645819f2aa88cfdc7778f938470c0984afc5e1f1504df982aa)\nThe OpenSSF Package Analysis project identified 'melio-platform-api-client' @ 5.0.0 (rubygems) as malicious.\n\nIt is considered malicious because:\n\n- The package communicates with a domain associated with malicious activity.\n","affected":[{"package":{"name":"melio-platform-api-client","ecosystem":"RubyGems"},"versions":["5.0.0","3.0.1","3.1.1","3.1.2","3.1.4","4.4.4","4.4.5","4.4.6","5.0.1"]}],"references":[{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-6m65-49xq-pfxj"}],"database_specific":{"malicious-packages-origins":[{"import_time":"2024-07-28T23:33:52.252012045Z","modified_time":"2024-07-28T23:15:41Z","sha256":"cb4e0efafa3bf0645819f2aa88cfdc7778f938470c0984afc5e1f1504df982aa","source":"ossf-package-analysis","versions":["5.0.0"]},{"id":"RLMA-2024-10315","import_time":"2024-10-24T00:57:13.045934193Z","modified_time":"2024-10-16T15:04:22Z","sha256":"3a2b123e03a1e782c385419aff070781610593da7fef94b4d548673d591615cd","source":"reversing-labs","versions":["3.0.1","3.1.1","3.1.2","3.1.4","4.4.4","4.4.5","4.4.6","5.0.0","5.0.1"]},{"id":"RLUA-2026-08591","import_time":"2026-09-24T08:48:07.540176627Z","modified_time":"2026-09-22T16:31:52Z","sha256":"4ebd9a2e7736a03ad1a45921cb2ca0ffe0fe6831b41ed031176508b69039d2e9","source":"reversing-labs"}]},"credits":[{"name":"OpenSSF: Package Analysis","contact":["https://github.com/ossf/package-analysis","https://openssf.slack.com/channels/package_analysis"],"type":"FINDER"},{"name":"ReversingLabs","contact":["https://www.reversinglabs.com"],"type":"FINDER"}]}