The RubyGems package 'lita_telegram' version 0.1.0 contains malicious code as identified by the OpenSSF malicious packages project. This is a supply chain threat where the package itself is intentionally harmful. There is no CVSS score or detailed technical exploitation information available. No official patch or remediation guidance is provided.