The autoproj_stats package version 0.1.0 on RubyGems has been flagged as containing malicious code by the OpenSSF malicious packages initiative. This is a supply chain threat involving a malicious package distributed through a trusted package manager. There is no detailed information on the nature of the malicious code or its impact. No known exploits in the wild have been reported. No patch or remediation details are provided.

Use of the autoproj_stats 0.1.0 package may lead to execution of malicious code, potentially compromising systems that install or run this package. The exact impact is not detailed in the source data. No known active exploitation has been reported.

Avoid using autoproj_stats version 0.1.0. Since no patch or fixed version is indicated, the recommended action is to remove or not install this package. Monitor official RubyGems advisories or OpenSSF updates for any future remediation or safe versions.