The active-comparison_validator RubyGems package version 0.1.3 has been identified as containing malicious code. This classification comes from the OpenSSF malicious packages database and is tracked under MAL-2024-6396 and GHSA-x9hx-xpqm-3vcg. The package is flagged as a supply chain threat due to its malicious nature rather than a conventional software vulnerability. No CVSS score or detailed technical exploit information is available.

Use of the active-comparison_validator version 0.1.3 package may result in execution of malicious code within the environment where it is installed. This poses a risk of compromise or unauthorized actions depending on the malicious payload. No specific impact details or exploit reports are currently documented.

No official patch or remediation guidance is provided in the available data. Users should avoid using active-comparison_validator version 0.1.3 and remove it from their environments if present. Monitor vendor or repository advisories for updates or removal notices. Since this is a malicious package, replacing it with a trusted alternative is recommended.