The cafepress-api RubyGem version 0.3.2 contains malicious code. This package is identified as a malicious package by the OpenSSF and the GHSA database. There is no CVSS score available for this threat. No official patch or remediation guidance is provided in the available data.