The 'hgwcal1' RubyGem version 0.0.1 is identified as containing malicious code, per the OpenSSF malicious packages repository. This is a case of a malicious package rather than a vulnerability in the traditional sense. There is no CVSS score or detailed technical information about the nature of the malicious code or its impact. No patch or fix is available, and no known exploits have been reported. The package should be considered unsafe to use.

Use of the 'hgwcal1' RubyGem version 0.0.1 may lead to execution of malicious code as the package itself is flagged as malicious. Specific impacts are not detailed in the source data. No known exploits in the wild have been reported, but the presence of malicious code poses a security risk to systems that install or run this package.

Avoid using the 'hgwcal1' RubyGem version 0.0.1. Since this is a malicious package, the recommended action is to remove it from any environments where it is installed and to avoid installing it in the future. No official patch or remediation is available. Monitor RubyGems sources and advisories for any updates or removal notices.