The apple-dep_client Ruby gem version 2.2.2 has been identified as containing malicious code by the OpenSSF malicious packages project (MAL-2024-6639). This is a supply chain compromise where the package itself is malicious, potentially impacting users who install or use this specific version. There is no detailed technical information or CVSS score available, and no known exploits in the wild have been reported. The affected version is exactly 2.2.2.

Users who install or use apple-dep_client version 2.2.2 may be exposed to malicious code execution or other harmful effects inherent to the malicious package. The exact impact is not detailed in the available data. No known active exploitation has been reported.

No official patch or remediation guidance is provided in the available data. Users should avoid using apple-dep_client version 2.2.2 and verify the integrity and source of RubyGems packages before installation. Monitor vendor advisories or the RubyGems repository for updates or removal of the malicious package.