The codestats_metrics-reporter RubyGems package at version 0.1.13 has been identified as containing malicious code by the OpenSSF malicious packages project. This classification means the package itself is considered harmful or compromised, posing a security risk to users who install or run it. No further technical details, such as the nature of the malicious code or exploitation methods, are provided in the source data. There is no indication of known exploits in the wild or vendor advisories addressing this issue.

Use of the codestats_metrics-reporter package version 0.1.13 may lead to execution of malicious code, potentially compromising the security and integrity of systems where it is installed. The exact impact is not detailed, but malicious packages typically risk data theft, system compromise, or unauthorized actions.

Avoid using the codestats_metrics-reporter package version 0.1.13. Since no patch or remediation is currently available or documented, users should remove or replace this package with a trusted alternative. Monitor official RubyGems and security advisories for updates or fixes related to this package.