The bosh-cli_plugin_consul RubyGems package at version 0.1.0 is flagged as malicious code according to the OpenSSF malicious packages database (MAL-2024-6787). This indicates that the package may contain harmful or unauthorized code intended to compromise systems or data of users who install it. There is no detailed vulnerability or exploit information provided, and no known exploits in the wild have been reported. The threat is specific to the exact version 0.1.0 of this package.

Users who install or use the bosh-cli_plugin_consul package version 0.1.0 may be exposed to malicious code execution, which could lead to compromise of their environment or data. Since this is a malicious package, the impact depends on the payload and intent of the malicious code, which is not detailed here. No known active exploitation has been reported.

Avoid using bosh-cli_plugin_consul version 0.1.0. Since no patch or fixed version is indicated, users should remove this version from their environments and source dependencies from trusted and verified packages. Monitor vendor or repository advisories for updates or safe replacement versions. Patch status is not yet confirmed — check the vendor advisory or RubyGems security notices for current remediation guidance.