The assembla-cli RubyGem version 0.0.2 contains malicious code as identified by the OpenSSF malicious packages project. This package is flagged as a malicious package rather than a traditional vulnerability with a CVE score. There is no public information about exploitation in the wild or a patch available. Users should avoid using this specific version of the assembla-cli package.