The apptuit_fluent-plugin RubyGem version 0.1.3 has been identified as containing malicious code by the OpenSSF malicious packages project and is cataloged under MAL-2024-6654. This is a supply chain threat involving a malicious package published to RubyGems. No further technical details or exploitation data are provided. No official patch or fix information is available.

Use of the apptuit_fluent-plugin version 0.1.3 may result in execution of malicious code within environments that install this package. The exact impact depends on the malicious payload but can include compromise of system integrity or data confidentiality. No known exploits in the wild have been reported.

Avoid using apptuit_fluent-plugin version 0.1.3. Since no patch or remediation is currently available, users should remove this version from their dependencies and replace it with a trusted alternative. Monitor official RubyGems advisories and the OpenSSF malicious packages repository for updates or fixes.