The package 'activerecord-serialize-coders' version 0.0.1 on RubyGems has been flagged as containing malicious code by the OpenSSF malicious packages project. This is a supply chain compromise where the package itself is malicious rather than a traditional vulnerability in legitimate code. There is no CVSS score or detailed technical exploit information available. No known exploits in the wild have been reported. No patch or fix links are provided, and the package is not a cloud service.

Use of this malicious package could lead to compromise of systems or data depending on the payload and intent of the malicious code embedded within. The exact impact is not detailed in the available data. Since it is a supply chain threat, any project depending on this package version may be at risk.

Avoid using the 'activerecord-serialize-coders' package version 0.0.1. Since no official patch or remediation is provided, the best mitigation is to remove or replace this package with a trusted alternative. Monitor vendor advisories or the RubyGems repository for updates or removals of this malicious package.