The RubyGems package 'oaklfwk3' version 0.0.1 contains malicious code as identified by the OpenSSF malicious packages database. This is a supply chain threat involving a malicious package published to the RubyGems ecosystem. No specific technical details about the malicious behavior or exploitation methods are provided. There is no indication of known exploits in the wild. No patch or remediation information is available.