The 'acme_heisenberg' RubyGems package version 0.0.1 is identified as containing malicious code according to the OpenSSF malicious packages repository (MAL-2024-6352). This is a supply chain threat where the package itself is malicious rather than a vulnerability in the package code. There is no CVSS score or detailed technical vulnerability description available. No official patch or fix has been indicated, and no known exploits in the wild have been reported.

Use of the malicious 'acme_heisenberg' package version 0.0.1 could lead to compromise of systems or data depending on the nature of the embedded malicious code. Since this is a malicious package, the impact is potentially severe if the package is installed and executed in a development or production environment.

Avoid using the 'acme_heisenberg' RubyGems package version 0.0.1. Since no patch or remediation is provided, the best mitigation is to remove or not install this package. Monitor dependency sources and use trusted package repositories to prevent supply chain risks.