cards-lib (RubyGems) · Malicious Code
Affects cards-libSource GCVE Database
Rated by Threat Radar
Data as of 19 Jul 2026, 00:44 UTC
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
RubyGemscards-libpkg:gem/cards-libOther threats | Affected
| Fixed in– |
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
Users should avoid using 'cards-lib' version 0.2.5 and remove it if already installed. It is recommended to verify dependencies and replace this package with a trusted alternative. Monitor official advisories for any updates or fixes.
Description
The RubyGems package 'cards-lib' version 0.2.5 contains malicious code. This package has been identified as a malicious package by the OpenSSF project and is listed in the malicious-packages database. There is no CVSS score or detailed technical vulnerability description available. No official patch or remediation guidance is provided.