The 'sgrcdgzate' RubyGems package at version 0.0.1 has been identified as containing malicious code by the OpenSSF project and listed in the malicious packages database (MAL-2026-8618). This is a supply chain threat where the package itself is malicious rather than a vulnerability in legitimate code. There is no CVSS score or detailed technical exploit information available. No patch or fix is documented, indicating the package should be considered untrusted and avoided.

Use of the malicious 'sgrcdgzate' package version 0.0.1 could lead to compromise of systems or data depending on the payload of the malicious code. Since this is a malicious package, the impact depends on the nature of the embedded malicious code, which is not detailed here. No known exploits in the wild have been reported.

Avoid using the 'sgrcdgzate' RubyGems package version 0.0.1. Since this is a malicious package, the primary mitigation is to remove it from any environments and ensure dependency sources are trusted. No official patch or remediation is available. Monitor for any updates from RubyGems or OpenSSF regarding this package.