The 'hgrangex4' RubyGem version 0.0.1 has been identified as containing malicious code by the OpenSSF project, which tracks malicious packages across ecosystems. This package is flagged under the identifier MAL-2026-7748 and GHSA-2574-75xp-7pxr. There is no additional technical detail or exploit information available in the source data. The package is considered a supply chain threat due to its malicious nature.

Use of the 'hgrangex4' version 0.0.1 package may result in execution of malicious code within the environment where it is installed. This could lead to compromise of system integrity, data leakage, or other malicious outcomes depending on the payload embedded in the package. No known exploits in the wild have been reported at this time.

Avoid using the 'hgrangex4' RubyGem version 0.0.1. Since this is a malicious package, the recommended mitigation is to remove any installations of this package and avoid including it in dependency manifests. No official patch or fix is available because the package itself is malicious rather than a vulnerability in legitimate software. Monitor trusted sources for any updates or advisories regarding this package.