This threat involves the presence of malicious code within specific versions (99.99.9 and 99.99.10) of the gitlab-orchestrator package distributed via RubyGems. The identification comes from the OpenSSF malicious packages project, indicating that these versions are compromised with malicious content. There is no detailed vulnerability or exploit description, no known exploits in the wild, and no patch or remediation information provided.

Users who install or use the affected versions of gitlab-orchestrator (99.99.9 and 99.99.10) may inadvertently execute malicious code embedded in the package. This could lead to compromise of systems or data depending on the nature of the malicious payload, though specifics are not provided. There is no indication of active exploitation in the wild at this time.

No official patch or remediation guidance is provided. Users should avoid using the affected versions (=99.99.9 and =99.99.10) of gitlab-orchestrator. It is recommended to verify package integrity and source before installation and to monitor vendor or RubyGems advisories for updates or removal of the malicious versions.