The zw_downloadops RubyGem at version 0.0.1340 is identified as containing malicious code according to the OpenSSF malicious-packages repository and the GHSA advisory GHSA-83hw-pxhm-f9w6. There is no detailed technical description of the malicious behavior or exploitation vectors provided. The package is flagged as a security threat due to its malicious nature rather than a traditional vulnerability.

Use of the zw_downloadops package version 0.0.1340 may lead to execution of malicious code within environments that install or run this package. The specific impact is not detailed, but malicious code presence typically risks system compromise, data theft, or further malware deployment. No confirmed exploits in the wild have been reported.

Avoid using the zw_downloadops package version 0.0.1340. Since no patch or fixed version is provided, the recommended mitigation is to remove or not install this package. Monitor official RubyGems sources and the OpenSSF repository for updates or safer alternatives. Patch status is not yet confirmed — check vendor or repository advisories for current remediation guidance.