The zjpath80 package version 0.0.1 in the RubyGems ecosystem has been identified as containing malicious code by the OpenSSF malicious packages project. This is a report of a malicious package rather than a software vulnerability with a fix. The package is flagged under MAL-2026-9613 and GHSA-gvrf-57r3-9mqj. There is no CVSS score or detailed technical description of the malicious behavior. No known exploits have been observed in the wild. No vendor advisory or patch information is available.

Use of the malicious zjpath80 package version 0.0.1 could lead to compromise depending on the nature of the embedded malicious code, which is not detailed in the provided data. Since this is a malicious package, it poses a risk of unauthorized code execution or other malicious activity if incorporated into software projects.

Avoid using the zjpath80 package version 0.0.1. Remove it from any environments where it is present. Since no patch or remediation is provided, the best mitigation is to not use or to remove this package. Monitor dependencies to prevent inclusion of known malicious packages.