The acts-as_crafter RubyGem version 1.0.0 is identified as containing malicious code by the OpenSSF malicious packages database (MAL-2024-6490). This classification indicates that the package itself is intentionally harmful or compromised, rather than having an unintentional vulnerability. There is no detailed technical information or CVSS score available, and no patch or fix has been published. The malicious nature of the package suggests that use of this version should be avoided or removed.

Using the acts-as_crafter RubyGem version 1.0.0 may introduce malicious code into dependent projects, potentially leading to unauthorized actions or compromise. However, no specific impact details or exploitation reports are available. The presence of malicious code inherently poses a security risk to systems that incorporate this package.

Avoid using acts-as_crafter version 1.0.0. Since no official patch or remediation is available, the recommended action is to remove this package from your environment and replace it with a trusted alternative. Monitor vendor or repository advisories for any updates or official guidance.