The xwandxml1 RubyGem version 0.0.1 is identified as containing malicious code, classified as a malicious package by the OpenSSF and recorded in the GCVE database under MAL-2026-9549. This is not a vulnerability in the traditional sense but a case of a package being intentionally harmful. There is no CVSS score or detailed exploit data, and no patch or fix is currently documented. The package should be considered untrusted and avoided.

Use of the xwandxml1 version 0.0.1 package may introduce malicious code into dependent applications or environments. This can lead to compromise of system integrity, data confidentiality, or availability depending on the payload of the malicious code. No specific impact details or exploit reports are available.

Avoid using the xwandxml1 package version 0.0.1. Remove it from any environments where it is installed. Since no patch or fix is available, the best mitigation is to not install or to uninstall this malicious package. Use trusted sources and verify package integrity before installation.