The package 'wprox-c217-extra3' version 0.0.1 in the RubyGems ecosystem has been identified as containing malicious code. This classification comes from the OpenSSF malicious packages repository and is cataloged under MAL-2026-9466. The package is considered a supply chain threat due to its malicious nature rather than a software vulnerability with a fix. No CVSS score or detailed technical exploit information is available. No vendor advisory or patch information exists, indicating that remediation involves avoiding or removing this package.

Use of the malicious 'wprox-c217-extra3' RubyGem version 0.0.1 could lead to compromise of systems or data depending on the malicious payload embedded within the package. Since it is a malicious package, it poses a direct security risk if incorporated into software projects or environments. No known exploits in the wild have been reported, but the presence of malicious code inherently risks unauthorized actions or data exposure.

No official patch or remediation is available. The recommended mitigation is to avoid using or remove the 'wprox-c217-extra3' RubyGem version 0.0.1 from all environments. Verify dependencies and supply chain integrity to ensure this malicious package is not included. Monitor for updates from RubyGems or security advisories for further guidance.