The 'selenium-spider' RubyGems package version 0.1.2 has been identified as containing malicious code by the OpenSSF project and listed under MAL-2024-7022. This is a case of a malicious package rather than a vulnerability caused by a coding error or design flaw. The package is flagged in the GitHub Security Advisory (GHSA-94j8-2wc4-mfvc) and the OSV database. No further technical details or exploit methods are provided in the source data.

Use of the 'selenium-spider' package version 0.1.2 may result in execution of malicious code, which can compromise the security and integrity of systems that include this package. The exact impact depends on the malicious payload embedded in the package, which is not detailed in the available data. No known active exploitation has been reported.

Since this is a malicious package, the primary mitigation is to avoid using 'selenium-spider' version 0.1.2. There is no patch or official fix available. Users should remove this package from their environments and replace it with trusted alternatives. Monitor RubyGems sources and advisories for updates or removal notices.