The 'activerecord_denormalize' RubyGems package at version 0.2.0 has been flagged for containing malicious code. This classification comes from the OpenSSF malicious packages repository and is tracked under MAL-2024-6480 and GHSA-jrv6-rjxr-h34h. There is no CVSS score or detailed technical vulnerability description available. No patch or remediation information is provided, and no known exploits in the wild have been reported. This represents a supply chain compromise risk for users who install or depend on this specific package version.

Users who install or use 'activerecord_denormalize' version 0.2.0 may be exposed to malicious code execution or other harmful effects stemming from the compromised package. The exact impact is unspecified due to lack of detailed technical data, but the presence of malicious code in a dependency can lead to unauthorized actions within affected environments.

Since no patch or remediation is currently documented, the recommended mitigation is to avoid using 'activerecord_denormalize' version 0.2.0. Users should verify the integrity and provenance of packages before installation and monitor official advisories for updates or fixed versions. Consider removing or replacing this package if it is present in your environment.