The package 'zwcalx2' version 0.0.486 in the RubyGems ecosystem has been flagged as containing malicious code. This classification comes from the OpenSSF malicious packages database and is tracked under MAL-2026-9845. There is no detailed technical vulnerability or exploit information available, and no known exploits in the wild have been reported. The threat is categorized as a malicious package rather than a software vulnerability with a patch or fix.

Use of the affected package version 0.0.486 may lead to execution of malicious code embedded within the package. This can compromise the security and integrity of systems that install and run this package. However, no specific impact details or exploitation reports are available.

Avoid using the affected version (=0.0.486) of the 'zwcalx2' package. Since no patch or remediation is listed, users should remove or replace this package version with a trusted alternative. Monitor official RubyGems advisories or the OpenSSF repository for updates or safer versions.