The RubyGems package 'asciidoctor_bibliography' version 0.10.3 has been identified as containing malicious code. This is a supply chain threat where the package itself is malicious. No CVSS score or detailed technical exploit information is available.