The ruby-playing_cards RubyGem version 0.0.2 has been identified as containing malicious code by the OpenSSF malicious packages initiative. This is a supply chain threat involving a malicious package published to RubyGems. The advisory does not provide technical details on the nature of the malicious code or its impact. No official patch or fix is documented, and no active exploitation has been reported.

Use of the ruby-playing_cards version 0.0.2 package may result in execution of malicious code embedded within the package. This poses a risk to systems that incorporate this package, potentially leading to compromise depending on the malicious payload. However, no specific impact details or exploitation reports are available.

Since no official patch or remediation is provided, the recommended action is to avoid using ruby-playing_cards version 0.0.2. Users should remove this package from their environments and replace it with trusted alternatives. Monitor vendor or repository advisories for updates or removal notices. No further mitigation guidance is available from the source.