The font_awesome-sass-c RubyGems package at version 4.7.2 is confirmed to contain malicious code as reported by the OpenSSF malicious-packages repository. This is a supply chain threat involving a compromised or intentionally malicious package distributed via RubyGems. No further technical details on the nature of the malicious code or exploitation methods are provided. There is no known exploit in the wild reported at this time.

Use of the affected version of font_awesome-sass-c (4.7.2) may result in execution of malicious code within the environment where the package is installed. This poses a risk to the integrity and security of systems relying on this package. Specific impacts depend on the malicious payload, which is not detailed in the available data.

No official patch or remediation has been published. Users should avoid using font_awesome-sass-c version 4.7.2 and remove it from their environments if present. Monitor the vendor or RubyGems advisories for updates or official fixes. Since this is a malicious package, replacing it with a verified clean version or an alternative package is recommended.