The RubyGems package 'liquid-renderer' version 5.0.1 contains malicious code. This is a supply chain threat where the package itself is intentionally harmful. No CVSS score is provided, and no official patch or remediation guidance is currently available.