The chalk-cli RubyGems package version 0.0.5 contains malicious code as identified by the OpenSSF malicious packages project. This is a supply chain threat where a package distributed via RubyGems is intentionally harmful. No CVSS score or detailed technical exploitation information is provided.