The 'activerecord-safe-initialize' RubyGems package at version 0.2.0 has been identified as containing malicious code. This was reported by the OpenSSF malicious packages project and cataloged under MAL-2024-6474 and GHSA-p43p-245v-rwcp. There is no CVSS score or detailed technical exploit information available. The package is not a cloud service, and no known exploits in the wild have been reported. No vendor advisory or patch information is provided, indicating that remediation status is unclear.

Use of the affected version 0.2.0 of the 'activerecord-safe-initialize' package may result in the introduction of malicious code into dependent applications. This poses a risk of compromise through supply chain attack vectors. However, no specific impact details or exploitation reports are available.

Patch status is not yet confirmed — check the vendor advisory or RubyGems repository for current remediation guidance. Until then, avoid using version 0.2.0 of 'activerecord-safe-initialize'. Consider removing or replacing this package in your dependency tree.