The 'bitmovin_api' RubyGem version 0.0.4 has been flagged as containing malicious code by the OpenSSF malicious packages initiative. This indicates that the package was published with intentionally harmful content, posing a risk to users who install or use this version. There is no CVSS score or detailed technical vulnerability description available. No known exploits in the wild have been reported. The threat is specific to the RubyGems ecosystem and affects exactly version 0.0.4 of the package.

Users who install or use 'bitmovin_api' version 0.0.4 may be exposed to malicious code execution, potentially compromising their systems or data. The exact impact depends on the nature of the malicious code, which is not detailed in the provided data. No known active exploitation has been reported so far.

No official patch or remediation is currently documented. Users should avoid using 'bitmovin_api' version 0.0.4 and remove it from their environments if present. Monitor the vendor or RubyGems advisories for updates or official fixes. Since this is a malicious package, replacing it with a trusted alternative or verifying package integrity before installation is recommended.