The activeadmin_mongoid-localize RubyGems package at version 1.0.1 has been identified as containing malicious code. This classification comes from the OpenSSF malicious packages repository and is tracked under MAL-2024-6455 and GHSA-3vw8-c86x-jm36. There is no CVSS score or detailed technical exploit information available. The threat is specific to this exact version of the package and does not indicate a vulnerability in the software itself but rather that the package is malicious.

Using the affected version 1.0.1 of activeadmin_mongoid-localize could result in execution of malicious code within the environment where the package is installed. This poses a risk to the integrity and security of systems relying on this package, potentially leading to unauthorized actions or compromise. No known exploits in the wild have been reported at this time.

Avoid using activeadmin_mongoid-localize version 1.0.1. Remove this version from your environment if present and do not install or update to this version. Since no patch or fixed version is indicated, rely on vendor or repository advisories for updates or alternative safe versions. Monitor official sources for any remediation announcements.