The 'moving-average' RubyGems package version 0.1.1 has been identified as containing malicious code. This classification is based on the OpenSSF malicious package repository and is tracked under MAL-2024-6990 and GHSA-v325-8q8j-v7qp. There is no detailed vulnerability or exploit information available, and no CVSS score has been assigned. The package is flagged as a security threat due to its malicious nature rather than a traditional vulnerability.

Use of the 'moving-average' RubyGems package version 0.1.1 may result in the introduction of malicious code into dependent projects. The specific impact is not detailed, but malicious packages can lead to unauthorized code execution, data compromise, or supply chain attacks. No known exploits have been reported in the wild at this time.

Avoid using the 'moving-average' RubyGems package version 0.1.1. Remove it from any projects where it is currently used. Since no patch or fixed version is indicated, the recommended action is to replace this package with a trusted alternative or verify the integrity of dependencies. Monitor official advisories for any updates or remediation guidance.