The 'a14z6ch-elapsed-days' RubyGems package at version 0.0.5 is identified as containing malicious code. This classification comes from the OpenSSF malicious packages repository and is tracked under MAL-2024-6291 and GHSA-cmcm-r4m5-gm4c. The package is flagged as malicious, but no further technical details, exploit mechanisms, or impact specifics are provided. There is no vendor advisory or patch information available, and no known active exploitation has been reported.

Using the affected version 0.0.5 of the 'a14z6ch-elapsed-days' package may introduce malicious code into the environment, potentially leading to compromise depending on the payload and execution context. However, no specific impact details or exploitation reports are available at this time.

Since no patch or remediation guidance is provided, the recommended action is to avoid using the affected version (=0.0.5) of the 'a14z6ch-elapsed-days' package. Users should remove or replace this package with a trusted alternative. Monitor official sources for any updates or advisories regarding remediation.