The package 'zwkopt10' version 0.0.3499 in the RubyGems ecosystem has been flagged as containing malicious code according to the OpenSSF malicious packages repository. This is cataloged under MAL-2026-9873 and GHSA-49wf-g98w-rwvp. There is no CVSS score or detailed vulnerability description available. No known exploits in the wild have been reported. The threat is related to a malicious package rather than a traditional software vulnerability.

Use of the malicious 'zwkopt10' package version 0.0.3499 could lead to compromise of systems or codebases that incorporate it, depending on the nature of the embedded malicious code. Specific impacts are not detailed in the source data. No known active exploitation has been reported.

Since this is a malicious package, the primary mitigation is to avoid using version 0.0.3499 of 'zwkopt10'. Remove or replace this package if it is present in your environment. No official patch or fix is available. Monitor vendor or repository advisories for updates. Conduct supply chain security reviews to prevent inclusion of malicious packages.