The 'github_org-stats' RubyGems package version 0.1.0 has been identified as containing malicious code. This classification comes from the OpenSSF malicious packages database and is tracked under MAL-2024-6934 and GHSA-hw36-4322-rp2p. There is no detailed vulnerability or exploit information, nor any CVSS score assigned. The package is not a cloud service, and no known exploits in the wild have been reported. No patch or fix information is provided in the source data.

The presence of malicious code in the package implies potential compromise or unauthorized actions if the package is installed and executed. However, specific impacts such as data theft, system compromise, or other effects are not detailed in the available information.

Since no official patch or remediation guidance is provided, users should avoid using the affected version (=0.1.0) of the 'github_org-stats' package. It is recommended to remove this package from environments where it is installed and to monitor for updates from the vendor or RubyGems repository for any official advisories or fixed versions. Patch status is not yet confirmed — check the vendor advisory or RubyGems for current remediation guidance.