MAL-2026-18763: Malicious code in agentic-call-control (RubyGems)

Published Nov 8, 2026

Updated

--- -= Per source details. Do not edit below this line.=-

Source: amazon-inspector (6604e2b2afca5be9f394786598898c0d718100ef3cb3595590fb74949b3eb9b5) The gem's native extension script executes during gem install and harvests installer-side data without consent. It collects host identifiers (current working directory, home directory, hostname, login name) and reads the contents of /etc/resolv.conf, /etc/passwd, and /etc/hosts, serializes them as JSON, and POSTs the payload over TLS to the hardcoded host k6rqb5d1inuytrro2u6arv87vy1vplda.oastify.com on port 443 using TCPSocket/OpenSSL. A DNS lookup to the same subdomain is also issued as an out-of-band beacon. The destination is a Burp Collaborator subdomain — attacker-controlled out-of-band interaction infrastructure unrelated to any declared publisher or build dependency. There is no native source tree or build logic that would require this network activity; the extension script's sole effect on install is reconnaissance exfiltration.

Affected Software

1 affected component

rubygems/agentic-call-control=1.1.8

Event History

Nov 8, 2026

Advisory Published

via OSV·09:39 AM

Data Sourced

via OSV·09:39 AM

DescriptionAffected Software

Frequently Asked Questions

What information can be exposed if this gem is installed?

The install-time native extension collects the current working directory, home directory, hostname, and login name. It also reads /etc/resolv.conf, /etc/passwd, and /etc/hosts, serializes the data as JSON, and sends it to a hardcoded external host over TLS.

When does the malicious activity occur?

It occurs during gem install, when the gem's native extension script executes. The script also performs a DNS lookup to the same hardcoded subdomain as an out-of-band beacon.

What systems are most directly exposed?

Systems on which agentic-call-control is installed and where the installer can access the listed host-identification data and system files are exposed. The described collection targets Unix-like paths including /etc/resolv.conf, /etc/passwd, and /etc/hosts.

How can I investigate whether an installation communicated with the attacker-controlled infrastructure?

Review installation-time network and DNS logs for connections or lookups involving k6rqb5d1inuytrro2u6arv87vy1vplda.oastify.com, including TLS traffic on port 443. Also identify systems where the affected gem was installed and assess whether the listed local files and identifiers were accessible at install time.

MAL-2026-18763: Malicious code in agentic-call-control (RubyGems)

Affected Software

Event History

Frequently Asked Questions

What information can be exposed if this gem is installed?

When does the malicious activity occur?

What systems are most directly exposed?

How can I investigate whether an installation communicated with the attacker-controlled infrastructure?

Company

Resources

Contact

Frequently Asked Questions

What information can be exposed if this gem is installed?

When does the malicious activity occur?

What systems are most directly exposed?

How can I investigate whether an installation communicated with the attacker-controlled infrastructure?