The acpc-poker-basic_proxy RubyGem version 3.2.2 has been identified as containing malicious code by the OpenSSF malicious packages initiative. This represents a supply chain compromise where a package distributed via RubyGems is intentionally harmful. The vulnerability is cataloged under MAL-2024-6361 and GHSA-qgx9-6wvr-vh45. There is no detailed technical analysis or CVSS score available, and no official patch or fix has been referenced in the data. The package is not a cloud service, and no known exploits have been observed in the wild.

Users who install or use acpc-poker-basic_proxy version 3.2.2 may be exposed to malicious code execution or other harmful effects inherent to the malicious package. The exact impact is not detailed, but supply chain malware can lead to unauthorized code execution, data compromise, or system integrity issues.

No official patch or remediation is currently documented. Users should avoid using acpc-poker-basic_proxy version 3.2.2 and remove it from their environments if present. Monitor official RubyGems advisories and the OpenSSF malicious packages repository for updates or removal notices. Since this is a malicious package, replacing it with a trusted alternative or verifying package integrity before use is recommended.