The RubyGems package 'lita_onewheel-beer-base' version 2.0.8 contains malicious code as identified by the OpenSSF malicious packages project. This is a supply chain threat where the package itself is intentionally harmful. No official patch or remediation guidance is currently provided.