The rails_structured_logging RubyGem versions 0.0.4, 0.1.1, 0.1.2, and 0.2.1 have been found to contain malicious code as reported by the OpenSSF and documented in the MAL-2026-1920 advisory. This is a supply chain threat involving a malicious package in the RubyGems ecosystem. No further technical details or exploitation methods are provided in the source data.

Use of the affected rails_structured_logging versions may lead to execution of malicious code embedded within the package. This poses a risk to the integrity and security of applications depending on these versions. No known exploits in the wild have been reported.

No official patch or remediation has been indicated in the available data. Users should avoid using the affected versions (=0.0.4, =0.1.1, =0.1.2, =0.2.1) of rails_structured_logging. Monitor vendor or repository advisories for updates or removal of the malicious packages. Consider replacing the package with a trusted alternative or verifying package integrity before use.