The 'pwnlambcal1' RubyGems package at version 0.0.1 is identified as containing malicious code according to the OpenSSF malicious packages repository (MAL-2026-8470). This is a case of a malicious package rather than a vulnerability in legitimate software. There is no CVSS score or detailed technical exploit information available. No official patch or fix is documented, and no known exploits in the wild have been reported. The package is flagged under the RubyGems ecosystem and is listed with the alias GHSA-7xq2-67qh-gxm6.

Use of the 'pwnlambcal1' package version 0.0.1 may lead to execution of malicious code, potentially compromising systems that install or run this package. The exact impact depends on the malicious payload, which is not detailed in the provided data. No known active exploitation has been reported.

Since this is a malicious package, the primary mitigation is to avoid installing or using the 'pwnlambcal1' package version 0.0.1. There is no patch or official fix available. Users should verify package authenticity and source before installation and rely on trusted repositories. Monitor vendor or security community advisories for any updates.