The RubyGems package 'sfc0e8fa' version 0.0.1 contains malicious code. This is identified as a malicious package threat rather than a traditional vulnerability. No CVSS score is assigned to this threat. There is no indication of known exploits in the wild or available patches.