The 'candy_-sql' RubyGems package at version 0.1.0 is identified as containing malicious code according to the OpenSSF malicious packages database (MAL-2024-6803). This classification means the package itself is intentionally harmful or compromised, posing a security risk to users who install or use it. There is no CVSS score or detailed technical vulnerability description available. No known exploits in the wild have been reported. No patch or fix is currently documented, and the package is not a cloud service.

Using the 'candy_-sql' version 0.1.0 package may result in execution of malicious code, potentially compromising the security and integrity of systems where it is installed. The exact impact depends on the malicious payload, which is not detailed in the available data. There are no known exploits in the wild at this time.

Since no official patch or remediation is provided, the recommended action is to avoid using or installing the 'candy_-sql' package version 0.1.0. Users should remove this package if already installed and seek alternative trusted packages. Monitor vendor or repository advisories for any updates or remediation guidance.