The alias-metrics RubyGem version 0.1.2 has been identified as containing malicious code by the OpenSSF malicious packages database. This is a supply chain threat where the package itself is malicious, potentially leading to compromise if used. There is no detailed vulnerability or exploit information available, and no official patch or fix has been indicated. The advisory references GHSA-vr5p-wxcc-3m6j and MAL-2024-6562 identifiers.

Use of the alias-metrics RubyGem version 0.1.2 may result in execution of malicious code embedded within the package. This can lead to compromise of systems or data where the package is installed. No specific exploit details or impact scenarios are provided, and no known active exploitation has been reported.

Since no official patch or remediation is provided, the recommended action is to avoid using the alias-metrics RubyGem version 0.1.2. Users should remove this package from their environments if present and consider using trusted alternatives. Monitor official advisories for any updates or fixes.