The acpc-poker_player_proxy RubyGems package at version 1.6.7 has been flagged as containing malicious code by the OpenSSF project and recorded in the GCVE database under MAL-2024-6367. This is a malicious package incident rather than a traditional vulnerability. There is no CVSS score or detailed technical exploit information available. No known exploits in the wild have been reported. The package is not a cloud service, and no vendor advisory or patch information is provided.

Users who install or use version 1.6.7 of the acpc-poker_player_proxy RubyGems package risk executing malicious code embedded within the package. This can lead to compromise of the host environment depending on the payload and intent of the malicious code. The exact impact depends on the malicious code behavior, which is not detailed in the provided data.

No official patch or remediation is currently documented. Users should avoid using version 1.6.7 of acpc-poker_player_proxy and remove it from their environments if installed. Consider using alternative trusted packages or versions not flagged as malicious. Monitor official advisories from RubyGems and the package maintainers for updates or removals.