RubyGems · rubygems.org

pwn

Credential file access: matched ".ssh/"

Why PkgRadar flagged 0.5.573

Severity	Signal	Evidence
high	Credential file access	matched ".ssh/" · vagrant/provisioners/jenkins_ssh-keygen.rb
medium	Remote Payload	matched "curl " · lib/pwn/ai/agent/burp_suite.rb
medium	Remote Payload	matched "wget " · packer/provisioners/phantomjs.rb

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`0.5.573`	High risk	27	2026-06-09

Block this in CI

PkgRadar gates pwn (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem rubygems [email protected]