The RubyGems package brightbox_boxgrinder-plugins version 0.0.6 contains malicious code as identified by the OpenSSF malicious packages database. This package is flagged as a malicious package rather than a traditional software vulnerability. There is no CVSS score or detailed technical exploit information available. No patch or remediation guidance is currently provided.