The RubyGem package 'endosome' version 22.55.0 has been identified as containing malicious code. This is a supply chain threat where the package itself is malicious rather than a traditional software vulnerability. No CVSS score or detailed technical exploit information is provided.