The RubyGems package 'ba-upload' version 0.1.0 contains malicious code as identified by the OpenSSF and reported in the GCVE database. This package is flagged as a malicious package rather than a traditional vulnerability. There is no CVSS score available for this threat. No official patch or remediation guidance is provided in the source data. There are no known exploits in the wild at this time.