The 'liquid-renderer' RubyGems package at version 5.0.1 has been identified as containing malicious code, as reported by the OpenSSF and tracked under MAL-2024-6958 and GHSA-pxp2-g75j-2wq5. This is a malicious package incident rather than a traditional vulnerability. There is no detailed technical description or exploit information available, and no patch or fix has been published. The package is not a cloud service, and no known exploits in the wild have been reported.

Use of the affected 'liquid-renderer' package version 5.0.1 may lead to execution of malicious code embedded within the package. This can compromise the security and integrity of systems that install or run this package. The exact impact depends on the malicious payload, which is not detailed in the available information.

No official patch or remediation is currently documented. Users should avoid using 'liquid-renderer' version 5.0.1 and remove it from their environments if present. Monitor vendor or repository advisories for updates or removal of the malicious package. Since this is a malicious package incident, replacing the package with a trusted alternative or verifying package integrity before use is recommended.