The RubyGems package 'lf295q2' version 0.0.191731 contains malicious code as identified by the OpenSSF project. This package is flagged as a malicious package in the RubyGems ecosystem. No CVSS score or detailed technical exploitation information is provided. There is no indication of known exploits in the wild or an available patch.