The RubyGems package logstash_codec-avro version 2.0.4 contains malicious code. This is identified as a malicious package rather than a traditional vulnerability. There is no CVSS score or detailed impact information available. No patch or remediation guidance is provided in the source data. No known exploits in the wild have been reported.