Just fought the same guy as karladdr (if you guys keep records, my account name is "Infernoraptor" and the match began around 12:15-12:20 PST). The card gives him full health, +20 brains, and a full hand (the card image was even just the word "missing" in red text.) HE was playing as a Rustbolt as well.
The * isn't even that good, I ended up forcing him to use the cheating card TWICE before he beat me and I was just using a slap-dash Sunflower shroom deck.
Popcap, I know you guys want to keep this game "kid friendly" by not having much in the way of social stuff but, come on. This kind of stuff ruins it for everyone. You guys are better than this.
Please just do an inventory sweep and be done with it:
You know, make a patch that, when loaded, searches player's saved decks to see if they have any cards that don't exist. Then, if they find problem cards, have the update send the details back to you. If it is a hack (rather than a false positive) banhammer them for ToS violation. Heck, you could even have a bot patrolling your servers "watching" matches to see if anything out of the ordinary (eg someone gaining an insane amount of multiple resources from 1 card in a way impossible in normal circumstances).
Most of all, SHOW THE PLAYER NAMES IN MATCH SO WE CAN REPORT THEM TO YOU.