The act-blue_reporter RubyGem version 0.1.0 is identified as containing malicious code according to the OpenSSF malicious packages database (MAL-2024-6375). This is a supply chain threat involving a package that may perform unauthorized or harmful actions if used. The advisory does not provide specific technical details about the malicious behavior or exploitation methods. No patch or fix is currently documented, and the package is flagged as malicious rather than vulnerable in the traditional sense.

Using the act-blue_reporter RubyGem version 0.1.0 may introduce malicious code into dependent projects, potentially compromising system integrity, confidentiality, or availability depending on the malicious payload. No specific impact details or exploitation reports are available. The presence of malicious code in a package can lead to supply chain compromise risks.

Avoid using the act-blue_reporter RubyGem version 0.1.0. Remove or replace this package in your projects. Since no official patch or remediation is provided, the best mitigation is to not install or to uninstall this malicious package. Monitor official advisories for any updates or fixes.