Launch Week Day 1: Announcing Security Design Review
CRITICAL RubyGems Malware

Malicious code in queenbee-plugin (RubyGems)

MAL-2025-192914

Published ยท Modified

Description


__

Source: ossf-package-analysis (705c314b786f674b8b06825a6211d1595db25022404041a4d8760b4094e863e1)

The OpenSSF Package Analysis project identified 'queenbee-plugin' @ 99.0.7 (rubygems) as malicious.

It is considered malicious because:

  • The package communicates with a domain associated with malicious activity.

  • The package executes one or more commands associated with malicious behavior.

Ready to move

Start Securing

Free, no credit card | First findings in minutes