The 'zwan_cal_https' RubyGems package at version 0.0.134 has been identified as containing malicious code. This classification comes from the OpenSSF malicious packages repository and is cataloged under MAL-2026-9836 (alias GHSA-62jx-64wg-hpr6). There is no detailed technical description of the malicious behavior or exploitation methods in the provided data. The package is not a cloud service and no known exploits in the wild have been reported.

Use of the malicious 'zwan_cal_https' package version 0.0.134 could lead to the introduction of malicious code into dependent applications or environments. Specific impacts are not detailed in the source data, but the presence of malicious code typically risks unauthorized code execution, data compromise, or other malicious activities depending on the payload.

No patch or remediation is indicated in the data. Users should avoid using the 'zwan_cal_https' package version 0.0.134. Removal or replacement with a trusted package is recommended. Since this is a malicious package, the vendor does not provide an official fix. Users should verify dependencies and ensure no usage of this package in their environments.