The newlogger RubyGems package versions 99.9.1 and 99.9.2 have been flagged as containing malicious code by the OpenSSF malicious packages initiative. This indicates that these specific versions of the package are intentionally harmful and pose a security risk to users who install them. There is no detailed technical description or known exploit information available. The threat is categorized as a malicious package rather than a traditional vulnerability.

Users who install or use newlogger versions 99.9.1 or 99.9.2 risk executing malicious code embedded within the package. This can lead to compromise of the environment where the package is deployed. No known exploits in the wild have been reported at this time.

Avoid using the affected versions (=99.9.1 and =99.9.2) of the newlogger package. Since no patch or fixed version is indicated, users should remove these versions from their environments and source dependencies from trusted, verified packages. Monitor official advisories for updates or fixed releases.