The RubyGems package 'ar-lightning' version 0.0.1 is identified as containing malicious code. This package is flagged as a malicious package by the OpenSSF project and is listed in the GitHub Security Advisory database. There is no CVSS score or detailed technical exploit information available for this threat.