The RubyGems package 'asset-pipeline' version 0.2.0 contains malicious code. This is a supply chain threat where the package itself is compromised to potentially perform unauthorized or harmful actions when used. No patch or fix information is provided, and no known exploits in the wild have been reported.