The RubyGems package 'space-commander' version 1.0.4 has been identified as containing malicious code. This is a supply chain threat where the package itself is intentionally harmful. No official patch or remediation guidance is currently provided. There are no known exploits in the wild at this time.