The active-record_lite RubyGems package version 0.3.0 has been identified as containing malicious code. This classification comes from the OpenSSF malicious packages database and is tracked under MAL-2024-6430 and GHSA-fm57-jpg5-j348. There is no detailed technical description of the malicious behavior or exploitation vectors available in the provided data. No patch or remediation information is provided, and no known exploits in the wild have been reported.

Use of the active-record_lite package version 0.3.0 may lead to execution of malicious code within applications that include this dependency. This can compromise the security and integrity of affected systems. However, no specific impact details or exploitation reports are available.

No official patch or remediation guidance is provided in the available data. Users should avoid using active-record_lite version 0.3.0 and remove it from their dependency trees. Consider replacing it with a trusted alternative or verifying the integrity of dependencies before use. Monitor vendor or repository advisories for updates or official remediation.