The RubyGems package 'bvr-api' version 0.3.12 has been identified as malicious by the OpenSSF Package Analysis project. This package is considered malicious because it communicates with a domain associated with malicious activity. No CVSS score or detailed exploit information is available. There is no indication of an official patch or remediation from the vendor at this time.