The active-model_serializers-matchers RubyGems package version 0.1.1 has been identified as containing malicious code. This is a supply chain threat where the package itself is malicious, potentially impacting any projects that depend on this specific version. The advisory is sourced from the OpenSSF malicious packages database and tracked under MAL-2024-6414 and GHSA-7x8w-r55j-7jm2. No further technical details or exploitation methods are provided.

Use of the malicious active-model_serializers-matchers version 0.1.1 package may lead to compromise of systems or data depending on the nature of the embedded malicious code. Specific impacts are not detailed in the source data.

Avoid using active-model_serializers-matchers version 0.1.1. Since no patch or fixed version is provided, the recommended action is to remove this version from your dependencies and replace it with a trusted alternative or wait for a vendor advisory with remediation guidance. Monitor official RubyGems and OpenSSF advisories for updates.