The 'acme_pki' RubyGems package version 0.2.1 has been flagged as containing malicious code by the OpenSSF malicious packages initiative. This indicates that the package is a supply chain threat distributing harmful code to users who install this specific version. There is no detailed vulnerability or exploit data available, and no CVSS score has been assigned. The package is not a cloud service, and no known exploits in the wild have been reported.

Users who install 'acme_pki' version 0.2.1 may inadvertently execute malicious code embedded within the package. This can lead to compromise of the affected systems depending on the nature of the malicious payload, which is not detailed in the provided data. Since this is a malicious package, the impact is potentially severe but specifics are not disclosed.

Avoid using 'acme_pki' version 0.2.1. Since no patch or fixed version is indicated, users should remove this version from their environments and rely on trusted sources or alternative packages. Monitor official advisories for any updates or remediation guidance. No vendor advisory or official fix is currently available.