The prometheus_client_ruby RubyGems package contains malicious code in specific versions. This issue was identified by the OpenSSF and reported as a malicious package. The affected versions are 0.0.900, 0.1.900, 0.900.0, 1.900, and 9002.0. There is no CVSS score or detailed technical exploit information available. No official patch or remediation guidance has been provided yet.