The em_statsd RubyGem version 1.0.0 has been identified as containing malicious code by the OpenSSF malicious packages initiative. This is a supply chain threat involving a malicious package published to the RubyGems ecosystem. There is no detailed technical description of the malicious behavior or exploitation method in the provided data. No patch or remediation details are available.

Use of the em_statsd RubyGem version 1.0.0 may result in execution of malicious code embedded in the package. This poses a risk to systems that install or run this package, potentially leading to compromise depending on the malicious payload. No known exploits in the wild have been reported at this time.

Since this is a malicious package, the primary mitigation is to avoid installing or using em_statsd version 1.0.0. No official patch or fix is available. Users should remove this package if present and verify dependencies to prevent supply chain compromise. Monitor vendor advisories or RubyGems for updates or removal of the malicious package.