The RubyGems package 'edmunds-vin' version 0.1.1 contains malicious code. This package is identified as a malicious package by the OpenSSF project and is listed in the GHSA-malware database. There is no CVSS score or detailed technical exploit information available. No patch or remediation guidance is provided.