MAL-2025-192914

    Dashboard / Malicious Package / MAL-2025-192914

    MAL-2025-192914

    Published: 23 Dec 2025Last Modified: 23 Jul 2026Aliases: 
    GHSA-v7j5-ccf7-5prj

    Summary: Malicious code in queenbee-plugin (RubyGems)

    Details: Source: ossf-package-analysis (705c314b786f674b8b06825a6211d1595db25022404041a4d8760b4094e863e1) The OpenSSF Package Analysis project identified 'queenbee-plugin' @ 99.0.7 (rubygems) as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity. - The package executes one or more commands associated with malicious behavior.

    References:

    Affected packages

    Package

    Name: queenbee-plugin

    Purl: pkg:gem/queenbee-plugin

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    90002.0
    MAL-2025-192914 | CVE-DB