The alacrity-client package version 0.0.1 on RubyGems has been identified as containing malicious code by the OpenSSF malicious-packages project. This classification is based on analysis from the OSS-Fuzz Security Foundation and is cataloged under MAL-2024-6543. There is no CVSS score or detailed vulnerability description available, and no known exploits in the wild have been reported. The package is flagged as malicious rather than a traditional vulnerability, indicating it may perform unauthorized or harmful actions if used.

Use of the alacrity-client version 0.0.1 package may result in execution of malicious code, potentially compromising the security of systems that install or run this package. The exact impact is not detailed, but malicious packages typically risk data theft, system compromise, or unauthorized actions.

Avoid using the alacrity-client package version 0.0.1. Since this is a malicious package, the best mitigation is to remove or not install this version. No official patch or fix is available. Users should verify package integrity and source before installation and rely on trusted package repositories.