The 'rfetch4' RubyGems package at version 0.0.1 has been identified as containing malicious code by the OpenSSF project and is listed in the malicious packages database under MAL-2026-8513. This is not a vulnerability in the traditional sense but a case of a package being intentionally malicious. There are no known exploits in the wild reported, and no patch or remediation information is available.

Using the 'rfetch4' package version 0.0.1 may introduce malicious code into the environment, potentially compromising system integrity or confidentiality depending on the payload of the malicious code. Since this is a malicious package, the impact depends on the specific malicious behavior embedded, which is not detailed in the provided data.

Avoid using the 'rfetch4' package version 0.0.1. Remove it from any environments where it is installed. Since this is a malicious package, the best mitigation is to not install or to uninstall it if present. No official patch or fix is available; remediation involves replacing or removing the package.