The RubyGems package 'basic_stats' version 0.0.2 has been identified as containing malicious code. This is a supply chain threat where the package itself is intentionally harmful. There is no CVSS score available for this issue. No official patch or remediation guidance is provided in the source data. No known exploits in the wild have been reported.