The package 'zwday26' version 0.0.1 in the RubyGems ecosystem is identified as containing malicious code. This classification comes from the OpenSSF malicious packages repository and is cataloged under MAL-2026-9853. There is no detailed vulnerability or exploit information, nor is there an available patch or remediation. The threat is a supply chain risk due to the presence of malicious code within the package itself.

Using the 'zwday26' version 0.0.1 package may expose users to malicious code execution risks inherent in the package. Since it is flagged as a malicious package, it may perform unauthorized or harmful actions when included in software projects. No specific exploit details or impact metrics are provided.

Since this is a malicious package with no patch available, the recommended mitigation is to avoid using the 'zwday26' package version 0.0.1 entirely. Remove any existing installations of this package from your environment and ensure dependency management processes include checks against known malicious packages such as those maintained by OpenSSF.