The rubylove-playing-cards package version 0.0.1 in the RubyGems ecosystem has been identified as containing malicious code. This classification comes from the OpenSSF malicious packages database and is tracked under MAL-2024-7019 and GHSA-vmrx-9cvh-28j8. There is no detailed vulnerability or exploit information available, and no CVSS score has been assigned. The package is considered a supply chain threat due to its malicious nature.

Use of the rubylove-playing-cards package version 0.0.1 may introduce malicious code into dependent projects, potentially compromising system integrity or security. No specific exploit details or impact scenarios are provided, and no known exploits in the wild have been reported.

Avoid using rubylove-playing-cards version 0.0.1. Since this is a malicious package, the recommended mitigation is to remove or not install this version. No official patch or fix is available. Users should verify dependencies and sources before installation to prevent supply chain compromise.