Skip to main content
VulnerabilityPublished Updated

queenbee-plugin (RubyGems) · Malicious Code

Affects queenbee-pluginSource GCVE Database

0
Severity
High

Rated by Threat Radar

Data as of 18 Jul 2026, 22:33 UTC

What to do

Affected software

ProductAffectedFixed in
RubyGemsqueenbee-pluginpkg:gem/queenbee-pluginOther threatsAffected
  • =90002.0
  • =99.0.7
  • =99.0.6
  • =99.0.4
  • =99.0.1
  • =99.0.0
  • =99.0.3
  • =99.0.5
  • =99.0.8
Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Until an official fix or removal guidance is available, users should avoid using the affected versions of the 'queenbee-plugin' package. Consider removing or replacing this package in your environment to prevent potential malicious activity.

Description

The 'queenbee-plugin' RubyGems package versions including 90002.0, 99.0.0 through 99.0.8 are identified as malicious. The package communicates with domains linked to malicious activity and executes commands associated with harmful behavior. There is no CVSS score or official patch information available for this threat.

References

Community reviews

Loading reviews…