The 'active-model-password' RubyGems package version 1.0.3 has been identified as containing malicious code by the OpenSSF malicious packages project. This classification indicates that the package itself is intentionally harmful or compromised, rather than suffering from a conventional software vulnerability. No further technical details or exploitation methods are provided in the source data. There is no vendor advisory or patch information available.

Use of the malicious 'active-model-password' version 1.0.3 package could lead to compromise of systems or data depending on the nature of the embedded malicious code. However, specific impacts are not detailed in the available information. No known active exploitation has been reported.

No official patch or remediation guidance is provided. Users should avoid using 'active-model-password' version 1.0.3 and remove it if already installed. Consider using alternative trusted packages or versions. Monitor official RubyGems advisories and the OpenSSF malicious packages repository for updates.