The active-model_serializer_plus RubyGems package version 1.1.0 has been flagged as containing malicious code by the OpenSSF malicious-packages project. This indicates that the package was intentionally crafted to perform harmful actions when used. There is no detailed vulnerability or exploit description beyond the classification as a malicious package. No patch or remediation details are provided.

Using the affected version 1.1.0 of active-model_serializer_plus may lead to execution of malicious code embedded in the package, potentially compromising the security of systems that install or run this package. The exact impact depends on the malicious payload but could include unauthorized access, data compromise, or system disruption.

Avoid using active-model_serializer_plus version 1.1.0. Since no patch or fixed version is indicated, the recommended mitigation is to remove this package from your environment and replace it with a trusted alternative or a clean version if available. Monitor official RubyGems advisories for updates or fixes.