The RubyGems package 'cards-lib' version 0.2.5 contains malicious code. This package has been identified as a malicious package by the OpenSSF project and is listed in the malicious-packages database. There is no CVSS score or detailed technical vulnerability description available. No official patch or remediation guidance is provided.