The active-record_serialize_json RubyGems package version 0.1.4 has been identified as containing malicious code. This classification comes from the OpenSSF malicious packages database and is tracked under MAL-2024-6432 and GHSA-pgfr-3895-5mrc. The package is flagged as a supply chain threat due to the presence of malicious content within the package itself. No further technical details or exploit mechanisms are provided in the source data.

Use of the malicious active-record_serialize_json package version 0.1.4 could lead to compromise of systems that install or run this package, as it contains malicious code. The exact impact is not detailed, but supply chain malware can lead to unauthorized code execution or data compromise. No known active exploitation has been reported.

No official patch or remediation is currently documented. Users should avoid using active-record_serialize_json version 0.1.4 and remove it from their environments if present. Monitor official vendor or repository advisories for updates or removal of the malicious package. Since this is a supply chain threat, verifying package integrity and using trusted sources is recommended.