The package 'aasm-active-fedora' version 0.1.2 in the RubyGems ecosystem is flagged as malicious code according to the OpenSSF malicious packages database. This indicates that the package contains intentionally harmful code that could compromise systems using it. There is no detailed technical analysis or exploit information available in the provided data. No patch or remediation details are given, and no known exploits in the wild have been reported.

Use of the affected version 0.1.2 of 'aasm-active-fedora' may lead to compromise due to the presence of malicious code within the package. The specific impact is not detailed, but supply chain malware can lead to unauthorized code execution, data theft, or system compromise.

Avoid using the affected version (=0.1.2) of 'aasm-active-fedora'. Since no patch or fixed version is provided, users should remove or replace this package with a trusted alternative. Monitor official advisories for updates or fixed releases. No vendor advisory or official fix is currently available.