The rfetch2 package version 0.0.1 in the RubyGems ecosystem has been identified as containing malicious code. This classification comes from the OpenSSF malicious packages database and is tracked under MAL-2026-8511 and GHSA-vh72-r7j4-8hp3. There is no detailed vulnerability or exploit information, nor a patch available, indicating this is a malicious package incident rather than a software flaw. The package should be considered untrusted and avoided.

Using the rfetch2 RubyGem version 0.0.1 may result in the execution of malicious code embedded in the package. This can compromise the security of systems that install or run this package. No specific exploit details or impact scenarios are provided, and no known exploits in the wild have been reported.

Avoid using the rfetch2 package version 0.0.1. Since this is a malicious package rather than a vulnerability with a patch, remediation involves removing or not installing this package. There is no official fix or patch available. Users should verify package integrity and source authenticity before installation.