The package 'zpx52537th' version 0.0.1 in the RubyGems ecosystem has been identified as containing malicious code. This classification comes from the OpenSSF malicious packages repository and is cataloged under MAL-2026-9687. There is no additional technical detail or CVSS scoring available, and no vendor advisory or patch information is provided. The package is flagged as malicious rather than a traditional vulnerability, indicating it may be intentionally harmful or fraudulent code distributed via RubyGems.

Use of the 'zpx52537th' version 0.0.1 package may introduce malicious code into dependent projects, potentially leading to compromise of systems or data where the package is installed. Since this is a malicious package, the impact depends on the nature of the embedded malicious code, which is not detailed here. No known exploits have been reported in the wild at this time.

Avoid using the 'zpx52537th' package version 0.0.1. Since this is a malicious package, the recommended mitigation is to remove it from any projects and dependencies and replace it with trusted alternatives. No official patch or fix is available. Users should verify dependencies and sources before installation to prevent inclusion of malicious packages.