The 'activemodel_validators' RubyGems package version 3.0.0 has been identified as containing malicious code. This classification comes from the OpenSSF malicious packages database and is tracked under MAL-2024-6466 and GHSA-fh7v-7jhp-c5pp. No CVSS score or detailed vulnerability description is provided, but the presence of malicious code indicates a supply chain compromise affecting this specific package version.

Use of the compromised 'activemodel_validators' version 3.0.0 package may lead to execution of malicious code within applications that depend on it. This can result in unauthorized actions, data compromise, or other harmful effects depending on the malicious payload embedded in the package. No known exploits in the wild have been reported at this time.

No official patch or remediation is currently documented. Users should avoid using 'activemodel_validators' version 3.0.0 and remove it from their dependency trees. It is recommended to verify the integrity and provenance of RubyGems packages before use. Monitor the vendor or repository for any official advisories or fixed versions. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.