The RubyGems package 'sm8295yubf' version 0.0.1 has been identified as containing malicious code by the OpenSSF malicious packages project and is cataloged under MAL-2026-8819. This is a case of a malicious package rather than a vulnerability in legitimate software. There is no CVSS score or detailed technical vulnerability description available. No known exploits in the wild have been reported. No patch or remediation is documented, as this is a malicious package that should be removed or avoided.

Use of the 'sm8295yubf' RubyGems package version 0.0.1 may lead to execution of malicious code, potentially compromising systems where it is installed. The exact impact depends on the malicious payload embedded in the package, which is not detailed in the available data. No confirmed exploitation in the wild is reported.

Avoid installing or using the 'sm8295yubf' RubyGems package version 0.0.1. If already installed, remove this package from your environment. Since this is a malicious package rather than a vulnerability with a patch, remediation involves removing the package and auditing for any impact caused by its presence. Monitor trusted sources like the OpenSSF malicious packages database for updates.