The RubyGems package 'actions-broker' version 99.99.99 has been identified as malicious by the OpenSSF Package Analysis project. The package executes one or more commands associated with malicious behavior. No official patch or remediation guidance is provided. There is no evidence of known exploits in the wild at this time.