The 'font_awesome-sassc' RubyGems package at version 4.7.1 has been identified as containing malicious code. This was reported by the OpenSSF and tracked under MAL-2024-6917 and GHSA-7qcc-rff4-5vr4. There is no detailed technical description of the malicious behavior or exploitation methods in the provided data. No known exploits in the wild have been reported. This is a malicious package incident rather than a traditional vulnerability in the software.

Use of the compromised 'font_awesome-sassc' version 4.7.1 package could lead to execution of malicious code within environments that install or run this package. This may result in unauthorized actions depending on the malicious payload, but specific impacts are not detailed in the source data.

No official patch or remediation is listed. Users should avoid using version 4.7.1 of 'font_awesome-sassc' and remove or replace it with a trusted, verified version or alternative package. Since this is a malicious package, remediation involves removing the compromised package from projects and dependency trees. Monitor vendor or repository advisories for updates or safe versions.