The RubyGems package 'font_league' version 1.0.0 contains malicious code as identified by the OpenSSF and reported in the GHSA advisory GHSA-87q3-6qxx-c4f7. This package is flagged as a malicious package rather than a traditional vulnerability. There is no CVSS score or detailed technical exploit information available. No patch or remediation guidance is provided. No known exploits in the wild have been reported.