The RubyGems package 'application-module' version 0.0.2 contains malicious code as identified by the OpenSSF malicious packages database. This is a supply chain threat where the package itself is intentionally harmful. No CVSS score or detailed impact analysis is available from the source data.