pkgscan.dev Ruby gem scan report

Is xmastree 0.0.1 safe?

1 of 6 security engines flagged xmastree 0.0.1 as malicious when pkgscan.dev scanned it on 2026-10-31. Do not install this Ruby gem. If it is already installed, remove it and rotate any credentials or tokens it could have read.

Flagged by 1 scanner Status: completed

Full findings from every engine are public — no account required.

Scan statuscompleted
Engines6 engines reported
Malware engines1 engine flagged this artifact as malicious
Issues reported0 engines reported security issues (for example known vulnerabilities)
First seen2026-10-31
Analyzed2026-10-31
SHA-256153eae62f84a09f795a127f481feccbfc8eb879bfcdf613c1c02a5a352156334
Package URLpkg:gem/xmastree@0.0.1

Engines

Open the full interactive report on pkgscan.dev →

pkgscan.dev is built by Yeeth Security. Read our malware research on VS Code extensions, npm, and PyPI.