The RubyGems package 'zwknum4' at version 0.0.2770 has been flagged as containing malicious code by the OpenSSF malicious packages database. This is a supply chain threat involving a malicious package rather than a vulnerability in the package code itself. No further technical details or exploit mechanisms are described in the source data. No patch or fix information is available, and no known active exploitation has been reported.

Use of the malicious 'zwknum4' package version 0.0.2770 may lead to execution of unauthorized or harmful code within affected Ruby environments. The exact impact depends on the malicious payload but generally poses a risk to system integrity and confidentiality. No confirmed active exploitation is known at this time.

No official patch or remediation is currently documented. Users should avoid using the affected version (=0.0.2770) of the 'zwknum4' package. Consider removing or replacing this package with a trusted alternative. Monitor vendor or security advisories for updates or official guidance.