The acts-as_multilingual RubyGem version 0.0.1 has been identified as containing malicious code. This is a supply chain threat where the package itself is malicious, potentially compromising systems that install or use it. The detection is sourced from the OpenSSF malicious packages database and tracked under MAL-2024-6499 and GHSA-5vxr-8v4g-2hr8. There is no CVSS score or detailed technical exploit information available, and no official patch or fix has been published.

Using the acts-as_multilingual RubyGem version 0.0.1 may lead to compromise due to the embedded malicious code. The exact impact depends on the malicious payload but generally includes risks such as unauthorized code execution, data exfiltration, or system compromise. No known exploits in the wild have been reported at this time.

Avoid using the acts-as_multilingual RubyGem version 0.0.1. Since no patch or remediation is available, the recommended action is to remove or not install this package. Use trusted and verified package sources and consider scanning dependencies for malicious content before use.