The RubyGems package 'bosh-lastpass_plugin' version 0.0.4 contains malicious code. This package is identified as a malicious package by the OpenSSF and is listed in the malicious-packages repository. No CVSS score or detailed technical exploit information is provided.