The cap_drupal-multisite RubyGems package version 0.3.2 is classified as containing malicious code according to the OpenSSF malicious packages database and the GitHub Security Advisory (GHSA-jmwm-4hpq-gr34). The advisory identifies this package as a threat due to its malicious nature but does not provide further technical details or exploit mechanisms. No patch or remediation information is provided, and no known active exploitation has been reported.

Use of the cap_drupal-multisite package version 0.3.2 may introduce malicious code into dependent projects, potentially compromising the security and integrity of systems that incorporate this package. The exact impact depends on the malicious payload, which is not detailed in the available data.

Since no patch or updated version is indicated, users should avoid using cap_drupal-multisite version 0.3.2. Remove or replace this package with a trusted alternative. Monitor official advisories for any updates or remediation guidance. Patch status is not yet confirmed — check the vendor advisory or the OpenSSF repository for current remediation guidance.