The johnny_five RubyGem package contains malicious code in multiple specific versions. This issue was identified by the OpenSSF and reported as a malicious package. There is no CVSS score or detailed technical exploit information available. No known exploits in the wild have been reported. The affected versions are explicitly listed and include a range of releases from 0.8.0 through 9.1.1. No patch or remediation information is provided.