The sprox-c160-4mod RubyGems package at version 0.0.1 is flagged as containing malicious code according to the OpenSSF malicious packages repository (MAL-2026-8888). This indicates that the package itself is intentionally harmful or contains backdoors or malware. No CVSS score or detailed vulnerability description is available. There are no known exploits in the wild reported at this time. The threat is categorized as a malicious package rather than a traditional vulnerability.

Using the malicious sprox-c160-4mod package version 0.0.1 could lead to compromise of systems or data depending on the payload of the malicious code. The exact impact is not detailed in the source data. As a supply chain threat, it may affect any environment that installs this specific package version.

Avoid using sprox-c160-4mod version 0.0.1. Since no patch or fixed version is indicated, the recommended action is to remove this package from your dependencies and replace it with a trusted alternative. Monitor RubyGems advisories for updates or official remediation. No vendor advisory or official fix is currently documented.