The OpenSSF Package Analysis project has flagged the 'queenbee-plugin' RubyGems package, specifically version 99.0.7 and several others, as malicious. This determination is based on observed communications with domains known for malicious activity and execution of commands indicative of malicious intent. No official vendor advisory or patch information is provided, and no known exploits in the wild have been reported.

Use of the affected 'queenbee-plugin' versions may result in unauthorized command execution and communication with malicious domains, potentially leading to compromise of the host environment. The exact impact depends on the commands executed and the nature of the malicious domains contacted.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix or removal guidance is available, users should avoid using the affected versions of the 'queenbee-plugin' package. Consider removing or replacing this package in your environment to prevent potential malicious activity.