The RubyGems packages named oaifetchmde1778385544 at versions 0.0.1 and 0.0.2 have been identified as containing malicious code, as documented by the OpenSSF malicious packages database (MAL-2026-8188). This is a supply chain threat involving a malicious package published to the RubyGems ecosystem. There is no further technical detail on the nature of the malicious code or its behavior. No official patch or fix is documented, and no known exploitation has been reported.

Use of these specific versions of the oaifetchmde1778385544 RubyGems package may lead to execution of malicious code within the environment where the package is installed. This can compromise system integrity, confidentiality, or availability depending on the payload of the malicious code. Since no known exploits are reported, the impact is potential but unconfirmed in active attacks.

Avoid using the oaifetchmde1778385544 RubyGems package versions 0.0.1 and 0.0.2. Since no patch or remediation is provided, the recommended action is to remove or not install these versions. Use only trusted and verified packages from official sources. Monitor vendor advisories or the OpenSSF malicious packages database for updates or removal of the malicious package.