The font_roboto-rails RubyGems package at version 0.0.3 has been identified as containing malicious code. This classification comes from the OpenSSF malicious-packages project and is tracked under MAL-2024-6920 and GHSA-58p6-xgv5-rr43. There is no detailed vulnerability or exploit information available, and no known exploits in the wild have been reported. The package is flagged as malicious rather than a traditional vulnerability.

Use of the malicious font_roboto-rails package version 0.0.3 could lead to execution of malicious code within environments that install and run this package. Specific impacts are not detailed in the source data, but malicious code presence generally risks system compromise, data theft, or other unauthorized actions depending on the payload.

Avoid using the font_roboto-rails package version 0.0.3. Since this is a malicious package, the recommended action is to remove it from your environment and replace it with a trusted alternative. No official patch or fix is available. Users should verify dependencies and ensure no transitive dependencies include this malicious package.