The 'archivist_client' RubyGems package at version 0.2.4 has been identified as containing malicious code, as reported by the OpenSSF and cataloged under MAL-2024-6673. This is a case of a malicious package rather than a vulnerability arising from a coding flaw. There is no detailed technical information on the nature of the malicious code or its impact. No official patch or fix is documented, and no known active exploitation has been reported.

Use of the 'archivist_client' version 0.2.4 package may lead to execution of malicious code embedded in the package. The exact impact is not detailed, but malicious packages can compromise system integrity, confidentiality, or availability depending on the payload. No confirmed exploitation in the wild is known at this time.

Since no official patch or remediation is documented, the recommended action is to avoid using the 'archivist_client' version 0.2.4 package. Users should remove or replace this package with a trusted alternative. Monitor vendor or repository advisories for any updates or remediation guidance.