{
  "affected": [
    {
      "package": {
        "ecosystem": "RubyGems",
        "name": "queenbee-plugin",
        "purl": "pkg:gem/queenbee-plugin"
      },
      "versions": [
        "90002.0",
        "99.0.7",
        "99.0.6",
        "99.0.4",
        "99.0.1",
        "99.0.0",
        "99.0.3",
        "99.0.5",
        "99.0.8"
      ]
    }
  ],
  "credits": [
    {
      "contact": [
        "https://github.com/ossf/package-analysis",
        "https://openssf.slack.com/channels/package_analysis"
      ],
      "name": "OpenSSF: Package Analysis",
      "type": "FINDER"
    },
    {
      "contact": [
        "https://www.reversinglabs.com"
      ],
      "name": "ReversingLabs",
      "type": "FINDER"
    }
  ],
  "database_specific": {
    "malicious-packages-origins": [
      {
        "id": "RLMA-2025-06624",
        "import_time": "2025-12-24T10:07:32.626473417Z",
        "modified_time": "2025-12-23T08:41:05Z",
        "sha256": "d90da20fcb1e0c7e7aca86ec48a7866d2263fe80dd2698b692fe426ae4de8382",
        "source": "reversing-labs",
        "versions": [
          "90002.0"
        ]
      },
      {
        "import_time": "2026-03-27T12:50:13.240462073Z",
        "modified_time": "2026-03-27T12:40:43Z",
        "sha256": "705c314b786f674b8b06825a6211d1595db25022404041a4d8760b4094e863e1",
        "source": "ossf-package-analysis",
        "versions": [
          "99.0.7"
        ]
      },
      {
        "id": "RLUA-2026-02090",
        "import_time": "2026-04-16T15:39:36.950312136Z",
        "modified_time": "2026-04-16T10:28:48Z",
        "sha256": "cd8daaa01f0acf4635ceb03645a039723dca0f1c74a1f3b56023a29b8a146637",
        "source": "reversing-labs",
        "versions": [
          "99.0.6",
          "99.0.4",
          "99.0.1",
          "99.0.7",
          "99.0.0",
          "99.0.3",
          "99.0.5",
          "99.0.8"
        ]
      }
    ]
  },
  "details": "\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ossf-package-analysis (705c314b786f674b8b06825a6211d1595db25022404041a4d8760b4094e863e1)\nThe OpenSSF Package Analysis project identified \u0027queenbee-plugin\u0027 @ 99.0.7 (rubygems) as malicious.\n\nIt is considered malicious because:\n\n- The package communicates with a domain associated with malicious activity.\n\n- The package executes one or more commands associated with malicious behavior.\n",
  "id": "MAL-2025-192914",
  "modified": "2026-04-16T15:42:11Z",
  "published": "2025-12-23T08:41:05Z",
  "schema_version": "1.7.4",
  "summary": "Malicious code in queenbee-plugin (RubyGems)"
}