The RubyGems package 'proto-dependency-graph-api' version 99.99.99 has been identified as malicious by the OpenSSF Package Analysis project. This package executes one or more commands associated with malicious behavior, indicating it is a supply chain threat. There is no CVSS score available, and no known exploits in the wild have been reported. No official patch or remediation guidance is provided at this time.