The package 'a1520mk-exercise4' version 0.1.5 in the RubyGems ecosystem is identified as containing malicious code according to the OpenSSF malicious packages repository (MAL-2024-6296). This is a case of a malicious package rather than a vulnerability in the software itself. There is no vendor advisory or patch available, and no known active exploitation has been reported. The detection is based on threat intelligence sources cataloging malicious packages.

Use of this malicious package version could lead to execution of unauthorized or harmful code within environments where it is installed. The exact impact depends on the malicious payload embedded in the package, which is not detailed in the provided data. No confirmed exploitation in the wild has been reported.

Avoid using the affected package version (=0.1.5) of 'a1520mk-exercise4'. Since no patch or official remediation is available, the best mitigation is to remove or not install this package. Use trusted and verified packages from official sources. Monitor for updates from the package maintainers or security advisories for any remediation.