The enpit-weather package version 0.1.0 in the RubyGems ecosystem has been identified as containing malicious code. This classification comes from the OpenSSF malicious packages project and is cataloged under MAL-2024-6891. There is no detailed technical description of the malicious behavior or exploitation methods available in the provided data. No patch or remediation information is provided, indicating that the package itself is malicious rather than vulnerable in the traditional sense.

Use of the enpit-weather 0.1.0 package may result in execution of malicious code, potentially compromising the security and integrity of systems that incorporate this package. Specific impacts are not detailed in the source data.

Avoid using the enpit-weather package version 0.1.0. Since this is a malicious package, the recommended action is to remove it from any environments where it is installed and replace it with a trusted alternative. No official patch or fix is available. Users should verify dependencies and sources to prevent installation of this package.