# Google Safe Browsing flag as malware

- Provider: [RubyGems.org](https://down.guide/rubygems)
- Level: confirmed
- Impact: Operational
- lasted 3h 16m
- started 2023-05-11 21:45 UTC
- Application
- us
- id: DWN-6ef1d2a937
- Official page: https://stspg.io/z7wzcw200ky8

## Updates from RubyGems.org
### 2023-05-11 21:45 UTC: identified
Google Safe Browsing has flagged the entire rubygems.org domain as malware, impacting all users of the Chrome, Safari, and Firefox browser.
The underlying issue appears to be an incorrect malware flag applied to all versions of a gem from the metasploit family. In our investigation we’ve identified that the same library is also available from GitHub and many Linux and BSD distro packages. We continue investigating, sharing information and working with Google to resolve this as soon as possible.
For the time being, there are no other issues: the website can be accessed as normal if you bypass the warning. Gem downloads and pushes continue working as normal.

### 2023-05-11 22:01 UTC: identified
We have heard that our appeal has successfully been escalated within the Google Safe Browsing team, and they are working to resolve things.

### 2023-05-12 01:01 UTC: resolved
Success! Google Safe Browsing has removed the malware flag from rubygems.org. Special thanks are owed to everyone who connected us to the Chrome and Safe Browsing teams, and the team members who assisted in clearing this up.

From the builder: does your app depend on RubyGems.org? [Sazabi](https://www.sazabi.com/?utm_source=down-guide&utm_medium=markdown&utm_content=rubygems) detects problems in your own logs without hand-written monitors, and you can ask it in plain language which errors mention RubyGems.org.

---
down.guide reads providers' official status pages every minute and adds its own evidence, always labeled. Free, no account. Agents: MCP at https://down.guide/mcp, REST at https://down.guide/api/v1, feeds at https://down.guide/feed. Built by [Sazabi](https://www.sazabi.com/?utm_source=down-guide&utm_medium=markdown&utm_content=DWN-6ef1d2a937), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.