The active-record_stats RubyGems package version 0.1.5 has been flagged as containing malicious code according to the OpenSSF malicious packages database. This is not a traditional vulnerability but a case of a malicious package in the RubyGems ecosystem. No CVSS score or detailed technical exploitation information is provided. There is no indication of known exploits in the wild or vendor patches available.

Using the affected version of the active-record_stats package (0.1.5) may introduce malicious code into dependent projects, potentially leading to unauthorized actions or compromise of systems that incorporate this package. The exact impact depends on the malicious payload embedded in the package, which is not detailed in the provided data.

Avoid using active-record_stats version 0.1.5. Remove or replace this package with a trusted alternative or a version verified to be clean. Since no patch or fixed version is indicated, users should not use this version and should verify the integrity of their dependencies. Monitor official RubyGems advisories or OpenSSF updates for further guidance.