Malicious code in active-scaffold_config_list_vho (RubyGems)

Dependency scanning

Check whether active-scaffold_config_list_vho is in your codebase

Corgea flags malicious and compromised dependencies with reachability analysis, so you fix the packages that actually run in your application instead of working through the whole lockfile.