The assembly_client RubyGem version 0.9.0 has been identified as containing malicious code. This classification comes from the OpenSSF malicious packages repository and is tracked under MAL-2024-6695 and GHSA-f87x-rjcx-2786. There is no detailed vulnerability or exploit information available, nor any CVSS score assigned. The package is flagged as malicious rather than a traditional vulnerability, indicating it may perform unauthorized or harmful actions when used.

Use of the assembly_client RubyGem version 0.9.0 may result in execution of malicious code, potentially compromising the security and integrity of systems that install or run this package. Specific impacts are not detailed, but malicious packages typically pose risks such as data theft, unauthorized access, or system compromise.

No official patch or remediation is currently available for this malicious package. The recommended mitigation is to avoid using assembly_client version 0.9.0 entirely. Users should remove this version from their environments and replace it with a trusted alternative or a clean version if available. Monitor official advisories for updates or fixes.