If this package is installed
Remove it, treat the machine (or CI runner) as compromised, and rotate every secret, token and key it could access — from a different, clean machine.
Details
Source: ossf-package-analysis (007d07edb120233aab0539e4646e8b634d2a95e2df9e6179bb9b2b6eb90f5a97)
The OpenSSF Package Analysis project identified 'pg_result_init' @ 2.0.9 (rubygems) as malicious.
It is considered malicious because:
- The package communicates with a domain associated with malicious activity.