The omniauth-pro-sante-connect RubyGems package versions 0.1.0 through 0.1.8 contain malicious code. This is a supply chain threat where the package itself is intentionally harmful. There is no CVSS score or detailed technical exploitation information available. No official patch or remediation guidance is provided at this time.