MAL-2026-19242: Malicious code in tdesign-vue-mono (RubyGems)
Published Nov 13, 2026
·Updated
--- -= Per source details. Do not edit below this line.=-
Source: ossf-package-analysis (b0cfa1af4f0cec458d6f289661f3d1791a2b8a484169b83ce9ec1ca78697f6e9) The OpenSSF Package Analysis project identified 'tdesign-vue-mono' @ 1.0.1 (rubygems) as malicious.
It is considered malicious because:
- The package communicates with a domain associated with malicious activity.
Affected Software
1 affected component
rubygems/tdesign-vue-mono=1.0.1
Event History
Nov 13, 2026
Advisory Published
via OSV·05:05 PM
Data Sourced
via OSV·05:05 PM
DescriptionAffected Software