The package 'campaign-monitor_subscriber' version 1.0.4 has been flagged as containing malicious code according to the OpenSSF malicious packages database (MAL-2024-6801). This is a supply chain threat involving a compromised or intentionally malicious RubyGems package. There is no CVSS score or detailed technical exploit information available. No known exploits in the wild have been reported. The vendor or maintainer has not provided a patch or advisory at this time.

Use of the affected version 1.0.4 of 'campaign-monitor_subscriber' may result in execution of malicious code embedded in the package. This can compromise the security of systems that install or run this package. The exact impact depends on the malicious payload, which is not detailed in the available data.

No official patch or remediation is currently available. Users should avoid using version 1.0.4 of 'campaign-monitor_subscriber' and remove it if already installed. Monitor official RubyGems advisories or the OpenSSF repository for updates or fixed versions. Consider using trusted package sources and verifying package integrity before installation.