The RubyGems package 'monolith-twirp-pullsd-users' versions 0.0.1 and 1.0.3 contain malicious code. This package is identified as a malicious package by the OpenSSF and tracked under MAL-2026-2816. There is no CVSS score or detailed technical exploit information available. No known exploits in the wild have been reported.