The 'zlam_newcalok' RubyGems package at version 0.0.201 has been identified as containing malicious code. This classification comes from the OpenSSF malicious packages repository and is tracked under MAL-2026-9640 and GHSA-9vcx-rh54-pmfg. There is no detailed vulnerability or exploit information, nor any patch or remediation instructions provided. The threat is related to the presence of malicious code within the package rather than a software flaw.

Use of the 'zlam_newcalok' package version 0.0.201 may result in execution of malicious code, potentially compromising systems or data depending on the payload and context of use. No known exploits in the wild have been reported. The impact is primarily the risk introduced by including a malicious package in a software supply chain.

Since this is a malicious package, the primary mitigation is to avoid using or remove the 'zlam_newcalok' package version 0.0.201 from your environment. There is no official patch or fix; remediation involves not trusting or installing this package. Monitor your dependencies to ensure this package is not included.