Testpranay versions 2.0.0, 2.0.1, and 2.0.2 published on RubyGems have been identified as containing malicious code. This classification comes from the OpenSSF malicious packages database and is tracked under MAL-2024-7040 and GHSA-r7gc-9mr3-6v4v. The package is flagged as malicious rather than vulnerable due to a coding flaw, indicating it may perform unauthorized or harmful actions if used. No patch or fix information is available, and no active exploitation has been confirmed.

Use of these specific versions of the Testpranay package may lead to execution of malicious code within the environment where the package is installed. This can compromise system integrity, confidentiality, or availability depending on the payload of the malicious code. No direct evidence of exploitation in the wild has been reported at this time.

Since no official patch or remediation guidance is provided, the recommended action is to avoid using the affected versions (=2.0.0, =2.0.1, =2.0.2) of the Testpranay package. Users should remove these versions from their environments and seek alternative trusted packages or versions not flagged as malicious. Monitor official RubyGems and OpenSSF advisories for updates or remediation announcements.