The 'wandhr2' RubyGems package version 0.0.1 has been identified as containing malicious code by the OpenSSF malicious packages project and is cataloged under MAL-2026-9222. This is a case of a malicious package rather than a vulnerability in legitimate software. There is no detailed technical information or CVSS score available, and no known exploits have been reported. The package should be considered untrusted and avoided.

Use of the 'wandhr2' version 0.0.1 package may lead to execution of malicious code, potentially compromising systems where it is installed. Since this is a malicious package, the impact depends on the nature of the embedded malicious code, which is not detailed in the provided data. No known exploits in the wild have been reported to date.

Avoid installing or using the 'wandhr2' RubyGems package version 0.0.1. Since this is a malicious package, removal of it from any environment is recommended. There is no official patch or fix; the best mitigation is to not use this package and to verify the integrity and trustworthiness of RubyGems packages before installation.