The RubyGems package 'apress_documentation' version 0.4.0 contains malicious code as identified by the OpenSSF malicious packages project. This package is flagged as a malicious package in the RubyGems ecosystem. No CVSS score is provided for this threat.