The RubyGems package 'api-geo_client' version 1.0.0 contains malicious code as identified by the OpenSSF malicious packages database. This is a supply chain threat involving a malicious package uploaded to the RubyGems ecosystem. No official patch or remediation has been indicated in the available data.