The 'action-subscriber' RubyGems package version 5.1.5 has been flagged for containing malicious code. This was reported by the OpenSSF malicious packages initiative and cataloged under MAL-2024-6383. The threat is specific to this exact version and involves the presence of intentionally harmful code within the package. No CVSS score or detailed technical impact information is available. No vendor advisory or patch information is provided, and no cloud service is involved.

The presence of malicious code in the 'action-subscriber' package could lead to compromise of systems that install and run this version of the package. The exact impact depends on the nature of the malicious code, which is not detailed in the provided data. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory or RubyGems repository for current remediation guidance. Until a fixed version or official guidance is available, avoid using version 5.1.5 of 'action-subscriber'. Consider removing or replacing this package if it is present in your environment.