The 'wandscalx' RubyGems package at version 0.0.1 is flagged as malicious code by the OpenSSF malicious packages database (MAL-2026-9255). This is not a vulnerability in the traditional sense but a report of a package containing harmful code. The advisory does not provide details on the nature of the malicious code or exploitation methods. There is no vendor advisory or patch information available. The package is not a cloud service, so remediation depends on users removing or avoiding this package.

Using the 'wandscalx' version 0.0.1 package may expose users to malicious code execution risks inherent in the package itself. Since this is a malicious package, the impact could include compromise of systems where the package is installed. No specific exploitation in the wild has been reported.

Users should avoid installing or remove the 'wandscalx' package version 0.0.1 from their environments. Since no official patch or fix is available, the best mitigation is to not use this package. Monitor for updates from RubyGems or security advisories for any further guidance.