The RubyGems package 'zwcalx9' at version 0.0.494 has been identified as containing malicious code by the OpenSSF project and is listed under MAL-2026-9852. This is a case of a malicious package rather than a vulnerability due to coding errors or design flaws. The package is flagged in the malicious package database, indicating it should not be used. No further technical details or exploit mechanisms are provided in the available data.

Use of the malicious 'zwcalx9' package version 0.0.494 could lead to execution of malicious code within environments that install and run this package. The exact impact is not detailed, but malicious packages typically pose risks such as unauthorized code execution, data compromise, or system integrity violations. No known active exploitation has been reported.

Avoid using the 'zwcalx9' RubyGems package version 0.0.494. Since this is a malicious package, the recommended action is to remove it from any environment where it is installed and to avoid installing it. No official patch or fix is available. Monitor RubyGems sources and use trusted packages only. Check vendor or repository advisories for updates or removal notices.