The package 'agfossgrant23' version 0.0.1 in the RubyGems ecosystem has been identified as containing malicious code. This classification comes from the OpenSSF malicious packages database and is tracked under MAL-2026-7475 and GHSA-jp6x-j4wj-pmvq. There is no detailed technical description of the malicious behavior or exploitation methods provided. The package is flagged as malicious rather than vulnerable due to a coding flaw.

Use of the malicious package 'agfossgrant23' version 0.0.1 could lead to compromise of systems or data depending on the payload of the malicious code. Specific impacts are not detailed in the source data. There are no known exploits in the wild reported at this time.

Avoid using the 'agfossgrant23' package version 0.0.1. Since this is a malicious package, the recommended action is to remove it from any environments where it is present and avoid installing it. No official patch or fix is applicable as this is a malicious package rather than a vulnerability in legitimate software.