queenbee-plugin

{"schema_version":"1.7.4","id":"MAL-2025-192914","published":"2025-12-23T08:41:05Z","modified":"2026-09-24T08:53:03.354323702Z","aliases":["GHSA-v7j5-ccf7-5prj"],"summary":"Malicious code in queenbee-plugin (RubyGems)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ossf-package-analysis (705c314b786f674b8b06825a6211d1595db25022404041a4d8760b4094e863e1)\nThe OpenSSF Package Analysis project identified 'queenbee-plugin' @ 99.0.7 (rubygems) as malicious.\n\nIt is considered malicious because:\n\n- The package communicates with a domain associated with malicious activity.\n\n- The package executes one or more commands associated with malicious behavior.\n","affected":[{"package":{"name":"queenbee-plugin","ecosystem":"RubyGems","purl":"pkg:gem/queenbee-plugin"},"versions":["90002.0","99.0.7","99.0.6","99.0.4","99.0.1","99.0.0","99.0.3","99.0.5","99.0.8"]}],"references":[{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-v7j5-ccf7-5prj"}],"database_specific":{"malicious-packages-origins":[{"id":"RLMA-2025-06624","import_time":"2025-12-24T10:07:32.626473417Z","modified_time":"2025-12-23T08:41:05Z","sha256":"d90da20fcb1e0c7e7aca86ec48a7866d2263fe80dd2698b692fe426ae4de8382","source":"reversing-labs","versions":["90002.0"]},{"import_time":"2026-03-27T12:50:13.240462073Z","modified_time":"2026-03-27T12:40:43Z","sha256":"705c314b786f674b8b06825a6211d1595db25022404041a4d8760b4094e863e1","source":"ossf-package-analysis","versions":["99.0.7"]},{"id":"RLUA-2026-02090","import_time":"2026-04-16T15:39:36.950312136Z","modified_time":"2026-04-16T10:28:48Z","sha256":"cd8daaa01f0acf4635ceb03645a039723dca0f1c74a1f3b56023a29b8a146637","source":"reversing-labs","versions":["99.0.6","99.0.4","99.0.1","99.0.7","99.0.0","99.0.3","99.0.5","99.0.8"]},{"id":"RLUA-2026-09023","import_time":"2026-09-24T08:48:42.054321827Z","modified_time":"2026-09-22T16:37:52Z","sha256":"d75b179a8de7af2c08d657ce83f465690265e835c91b3920d4ca344fe63e0be2","source":"reversing-labs"}]},"credits":[{"name":"OpenSSF: Package Analysis","contact":["https://github.com/ossf/package-analysis","https://openssf.slack.com/channels/package_analysis"],"type":"FINDER"},{"name":"ReversingLabs","contact":["https://www.reversinglabs.com"],"type":"FINDER"}]}