The RubyGems package 'wgsfoshttp2' version 0.0.1 contains malicious code. This package is identified as a malicious package by the OpenSSF and is listed in the GHSA-malware database. No CVSS score or detailed technical exploit information is provided.