The rubocop-vintedmetrics RubyGem versions 9.9.9 and 9.9.12 have been identified as malicious packages. These versions execute one or more commands associated with malicious behavior, posing a security risk to users who install them. No official patch or remediation guidance is currently provided.