The RubyGems package 'applicant-tracking_api' version 1.0.0 contains malicious code. This package is identified as a malicious package by the OpenSSF project and is flagged in the GHSA database. There is no CVSS score available for this threat. No known exploits in the wild have been reported.