The 'telegram-meetup_bot' RubyGems package version 0.3.0 is confirmed to contain malicious code as reported by the OpenSSF malicious packages repository (MAL-2024-7036). This is a supply chain threat where the package itself is malicious, potentially impacting any projects that include this specific version. No CVSS score or detailed technical exploit information is available. No vendor advisory or patch information is provided, indicating that remediation may require removing or replacing the affected package version.

Use of the 'telegram-meetup_bot' version 0.3.0 package may lead to execution of malicious code embedded within the package. This can compromise the security and integrity of applications depending on this package. The exact impact depends on the malicious code's behavior, which is not detailed in the available data. No known active exploitation has been reported.

Since no official patch or remediation guidance is available, users should avoid using 'telegram-meetup_bot' version 0.3.0. Remove this version from projects and dependencies. Monitor official RubyGems and OpenSSF advisories for updates or safer alternative versions. Conduct thorough code reviews and supply chain security checks before integrating third-party packages.