The RubyGem package 'oaklfwk4' version 0.0.1 contains malicious code as identified by the OpenSSF malicious packages database. This is a supply chain threat involving a malicious package published to the RubyGems ecosystem. No specific technical exploit details or impact scenarios are provided beyond the presence of malicious code. No patch or remediation guidance is currently available.