The 'zwagq' RubyGems package at version 0.0.1 is identified as containing malicious code according to the OpenSSF malicious packages repository. This classification indicates that the package itself is intentionally harmful or compromised rather than having a vulnerability that can be patched. No CVSS score or detailed technical exploit information is available. The package is flagged under the MAL-2026-9834 identifier and has an alias GHSA-939p-gv6x-68cf. No remediation or patch links are provided, and it is not a cloud service.

Using the 'zwagq' package version 0.0.1 may introduce malicious code into the software supply chain, potentially compromising systems that incorporate this package. Since it is a malicious package, the impact could include unauthorized code execution, data compromise, or other malicious activities depending on the payload embedded in the package. No known exploits in the wild have been reported.

Avoid using the 'zwagq' RubyGems package version 0.0.1. Remove it from any projects or dependency trees where it is present. Since no official patch or fix exists, the primary mitigation is to not install or to uninstall this package. Monitor trusted sources such as the OpenSSF malicious packages database for updates or further guidance.