The prometheus_gcstat RubyGem versions 0.0.900, 0.1.900, 0.900.0, 1.900, and 9002.0 contain malicious code. This is identified as a malicious package rather than a traditional vulnerability. No patch or remediation information is provided. There are no known exploits in the wild as of the published date.