{"id":"MAL-2025-192914","summary":"Malicious code in queenbee-plugin (RubyGems)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ossf-package-analysis (705c314b786f674b8b06825a6211d1595db25022404041a4d8760b4094e863e1)\nThe OpenSSF Package Analysis project identified 'queenbee-plugin' @ 99.0.7 (rubygems) as malicious.\n\nIt is considered malicious because:\n\n- The package communicates with a domain associated with malicious activity.\n\n- The package executes one or more commands associated with malicious behavior.\n","aliases":["GHSA-v7j5-ccf7-5prj"],"modified":"2026-09-24T09:01:25.959917517Z","published":"2025-12-23T08:41:05Z","database_specific":{"malicious-packages-origins":[{"versions":["90002.0"],"id":"RLMA-2025-06624","import_time":"2025-12-24T10:07:32.626473417Z","modified_time":"2025-12-23T08:41:05Z","sha256":"d90da20fcb1e0c7e7aca86ec48a7866d2263fe80dd2698b692fe426ae4de8382","source":"reversing-labs"},{"modified_time":"2026-03-27T12:40:43Z","sha256":"705c314b786f674b8b06825a6211d1595db25022404041a4d8760b4094e863e1","source":"ossf-package-analysis","versions":["99.0.7"],"import_time":"2026-03-27T12:50:13.240462073Z"},{"modified_time":"2026-04-16T10:28:48Z","sha256":"cd8daaa01f0acf4635ceb03645a039723dca0f1c74a1f3b56023a29b8a146637","source":"reversing-labs","versions":["99.0.6","99.0.4","99.0.1","99.0.7","99.0.0","99.0.3","99.0.5","99.0.8"],"id":"RLUA-2026-02090","import_time":"2026-04-16T15:39:36.950312136Z"},{"import_time":"2026-09-24T08:48:42.054321827Z","modified_time":"2026-09-22T16:37:52Z","sha256":"d75b179a8de7af2c08d657ce83f465690265e835c91b3920d4ca344fe63e0be2","source":"reversing-labs","id":"RLUA-2026-09023"}]},"references":[{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-v7j5-ccf7-5prj"}],"affected":[{"package":{"name":"queenbee-plugin","ecosystem":"RubyGems","purl":"pkg:gem/queenbee-plugin"},"versions":["90002.0","99.0.7","99.0.6","99.0.4","99.0.1","99.0.0","99.0.3","99.0.5","99.0.8"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/rubygems/queenbee-plugin/MAL-2025-192914.json"}}],"schema_version":"1.9.0","credits":[{"name":"OpenSSF: Package Analysis","contact":["https://github.com/ossf/package-analysis","https://openssf.slack.com/channels/package_analysis"],"type":"FINDER"},{"name":"ReversingLabs","contact":["https://www.reversinglabs.com"],"type":"FINDER"}]}