The 'allq-client' RubyGems package at version 1.1.1 has been identified as containing malicious code by the OpenSSF malicious packages initiative. This classification indicates that the package itself is intentionally harmful or compromised, rather than having an unintentional security vulnerability. There is no detailed technical information or CVSS scoring available for this threat. No known exploits in the wild have been reported.

Use of the malicious 'allq-client' version 1.1.1 package could lead to compromise of systems or data depending on the nature of the embedded malicious code. Specific impacts are not detailed in the source data. Because it is a malicious package, it poses a direct security risk if installed or used.

Avoid using the 'allq-client' RubyGems package version 1.1.1. Remove it from any environments where it is installed. Since this is a malicious package, do not trust or use this version. No official patch or fix is available; remediation involves removing or replacing the package with a trusted alternative. Monitor vendor or repository advisories for updates or removal notices.