{"id":"MAL-2025-192914","summary":"Malicious code in queenbee-plugin (RubyGems)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ossf-package-analysis (705c314b786f674b8b06825a6211d1595db25022404041a4d8760b4094e863e1)\nThe OpenSSF Package Analysis project identified 'queenbee-plugin' @ 99.0.7 (rubygems) as malicious.\n\nIt is considered malicious because:\n\n- The package communicates with a domain associated with malicious activity.\n\n- The package executes one or more commands associated with malicious behavior.\n","aliases":["GHSA-v7j5-ccf7-5prj"],"modified":"2026-07-23T07:55:58.679311315Z","published":"2025-12-23T08:41:05Z","database_specific":{"malicious-packages-origins":[{"versions":["90002.0"],"source":"reversing-labs","sha256":"d90da20fcb1e0c7e7aca86ec48a7866d2263fe80dd2698b692fe426ae4de8382","import_time":"2025-12-24T10:07:32.626473417Z","id":"RLMA-2025-06624","modified_time":"2025-12-23T08:41:05Z"},{"versions":["99.0.7"],"source":"ossf-package-analysis","sha256":"705c314b786f674b8b06825a6211d1595db25022404041a4d8760b4094e863e1","import_time":"2026-03-27T12:50:13.240462073Z","modified_time":"2026-03-27T12:40:43Z"},{"modified_time":"2026-04-16T10:28:48Z","versions":["99.0.6","99.0.4","99.0.1","99.0.7","99.0.0","99.0.3","99.0.5","99.0.8"],"source":"reversing-labs","sha256":"cd8daaa01f0acf4635ceb03645a039723dca0f1c74a1f3b56023a29b8a146637","import_time":"2026-04-16T15:39:36.950312136Z","id":"RLUA-2026-02090"}]},"affected":[{"package":{"name":"queenbee-plugin","ecosystem":"RubyGems","purl":"pkg:gem/queenbee-plugin"},"versions":["90002.0","99.0.7","99.0.6","99.0.4","99.0.1","99.0.0","99.0.3","99.0.5","99.0.8"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/rubygems/queenbee-plugin/MAL-2025-192914.json"}}],"schema_version":"1.7.5","credits":[{"name":"OpenSSF: Package Analysis","contact":["https://github.com/ossf/package-analysis","https://openssf.slack.com/channels/package_analysis"],"type":"FINDER"},{"name":"ReversingLabs","contact":["https://www.reversinglabs.com"],"type":"FINDER"}]}