The RubyGems package 'campaign-monitor_subscriber' version 1.0.4 contains malicious code as identified by the OpenSSF project. This is a case of a malicious package in the RubyGems ecosystem. No official patch or remediation guidance is currently provided.