The znowflake_client RubyGems package versions 1.1.1 through 1.1.9, and 2.0.0 through 2.1.0 contain malicious code. This is identified as a malicious package rather than a traditional vulnerability. There is no CVSS score or detailed impact analysis available. No official patch or remediation guidance is provided at this time.