{"schema_version":"1.9.0","id":"MAL-2024-7046","published":"2024-06-25T13:52:24Z","modified":"2026-09-24T09:02:51.089167573Z","aliases":["GHSA-hpqv-9x5w-2v9f"],"summary":"Malicious code in workarea-gift-cards (RubyGems)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n","affected":[{"package":{"name":"workarea-gift-cards","ecosystem":"RubyGems","purl":"pkg:gem/workarea-gift-cards"},"versions":["4.0.1"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/rubygems/workarea-gift-cards/MAL-2024-7046.json"}}],"references":[{"type":"ARTICLE","url":"https://blog.reversinglabs.com/blog/mining-for-malicious-ruby-gems"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-hpqv-9x5w-2v9f"}],"database_specific":{"malicious-packages-origins":[{"id":"RLMA-2024-05850","import_time":"2024-06-28T02:52:49.284504451Z","modified_time":"2024-06-25T13:52:24Z","sha256":"5c4e7730c281c0e57778b53a9fc62b4dbfd88fd79e971c4c5155c5b9b710422e","source":"reversing-labs","versions":["4.0.1"]},{"id":"RLUA-2024-10371","import_time":"2024-10-24T01:01:25.565885121Z","modified_time":"2024-10-16T15:05:07Z","sha256":"9241a6c503ccdf0ac267d8acd7ab803eb192892089437692235151f5f5db15d5","source":"reversing-labs"},{"id":"RLUA-2026-10006","import_time":"2026-09-24T08:50:01.618782555Z","modified_time":"2026-09-22T16:51:20Z","sha256":"522076a6d00884e0556fa25c71c89f2679cb18ee48290b1e4c04fab61d2eed2b","source":"reversing-labs"}]},"credits":[{"name":"ReversingLabs","contact":["https://www.reversinglabs.com"],"type":"FINDER"}]}