The RubyGems package 'assets-offline' version 0.0.5 has been identified as containing malicious code. This is a case of a malicious package rather than a traditional vulnerability. There is no CVSS score available, and no known exploits in the wild have been reported. No official patch or remediation guidance is provided.