The 'github-proto-repositories' RubyGems package at version 1.2.11.re9f78aa is flagged as malicious due to executing commands linked to malicious activity. This identification comes from the OpenSSF Package Analysis project and is catalogued under MAL-2025-46911. No further technical details or exploitation methods are described in the available data. The package is considered a supply chain threat due to its malicious code execution behavior.

Use of this specific package version may lead to execution of malicious commands, potentially compromising systems or data depending on the nature of those commands. The exact impact is not detailed in the source information. No known exploits in the wild are reported.

Patch status is not yet confirmed — check the vendor advisory or RubyGems repository for current remediation guidance. Until a fixed version or removal guidance is available, avoid using this package version and remove it from any environments where it is present.