The omniauth_mixer RubyGem version 0.1.2 contains malicious code as identified by the OpenSSF malicious packages project. This package is flagged as a malicious package rather than a traditional vulnerability. No official patch or remediation guidance is provided. There are no known exploits in the wild at this time.