---
_-= Per source details. Do not edit below this line.=-_
## Source: ghsa-malware (e764e09b4f1147970a87624e0e1d9214848519dc6f75fa7daaf6460fdb0e3bcd)
---
Credit: [OpenSSF](https://github.com/ossf/malicious-packages) ([source](https://github.com/ossf/malicious-packages/blob/9fbb5fba02ba2f02395d3d2d43c31b2c482b7a9d/osv/malicious/rubygems/wandhr6/MAL-2026-9226.json))
---
_-= Per source details. Do not edit below this line.=-_
## Source: ghsa-malware (ba7691ccc6f411650375038de5aa4aa937edce1d82edd0bba460ee24bef1d0cb)
---
Credit: [OpenSSF](https://github.com/ossf/malicious-packages) ([source](https://github.com/ossf/malicious-packages/blob/9fbb5fba02ba2f02395d3d2d43c31b2c482b7a9d/osv/malicious/rubygems/wandhr7/MAL-2026-9227.json))
---
_-= Per source details. Do not edit below this line.=-_
## Source: ghsa-malware (b6a9c4ad7234e56d01d07af6e46b093261429349be04df2c9c95bdc4ba7f62a2)
---
Credit: [OpenSSF](https://github.com/ossf/malicious-packages) ([source](https://github.com/ossf/malicious-packages/blob/9fbb5fba02ba2f02395d3d2d43c31b2c482b7a9d/osv/malicious/rubygems/wandhr5/MAL-2026-9225.json))
---
_-= Per source details. Do not edit below this line.=-_
## Source: ghsa-malware (fb9e74b3a2c4a087c0897a865f3c11c6a30b3a21afedfb1abcb3b26da58567fe)
---
Credit: [OpenSSF](https://github.com/ossf/malicious-packages) ([source](https://github.com/ossf/malicious-packages/blob/9fbb5fba02ba2f02395d3d2d43c31b2c482b7a9d/osv/malicious/rubygems/wandhr12/MAL-2026-9221.json))
---
_-= Per source details. Do not edit below this line.=-_
## Source: ghsa-malware (88e230552258ea828d326d315c9ec6c6ddb6937f38755f77e8c3287be8bedfb6)
---
Credit: [OpenSSF](https://github.com/ossf/malicious-packages) ([source](https://github.com/ossf/malicious-packages/blob/9fbb5fba02ba2f02395d3d2d43c31b2c482b7a9d/osv/malicious/rubygems/wandhr2/MAL-2026-9222.json))
---
_-= Per source details. Do not edit below this line.=-_
## Source: ghsa-malware (5b906eed2966bd62dd651a8819fbda08828f90ef582508c7ffcbcf94f1b7ecf9)
---
Credit: [OpenSSF](https://github.com/ossf/malicious-packages) ([source](https://github.com/ossf/malicious-packages/blob/9fbb5fba02ba2f02395d3d2d43c31b2c482b7a9d/osv/malicious/rubygems/wandhr3/MAL-2026-9223.json))
---
_-= Per source details. Do not edit below this line.=-_
## Source: ghsa-malware (f29523caa65c5a35a9f590dc45ad7a80bb15892fddfb19eefa0767e2da330470)
---
Credit: [OpenSSF](https://github.com/ossf/malicious-packages) ([source](https://github.com/ossf/malicious-packages/blob/9fbb5fba02ba2f02395d3d2d43c31b2c482b7a9d/osv/malicious/rubygems/wandhr4/MAL-2026-9224.json))
---
_-= Per source details. Do not edit below this line.=-_
## Source: ghsa-malware (f84c6002e6ca93066e56d6409f1d7e6492c144ec6f9dd446318ac04b56d79434)
---
Credit: [OpenSSF](https://github.com/ossf/malicious-packages) ([source](https://github.com/ossf/malicious-packages/blob/9fbb5fba02ba2f02395d3d2d43c31b2c482b7a9d/osv/malicious/rubygems/wandhr10/MAL-2026-9219.json))
---
_-= Per source details. Do not edit below this line.=-_
## Source: ghsa-malware (0c0786907fdf76c5cac761a1912004686c2f934f350d46509819adfec170bf19)
---
Credit: [OpenSSF](https://github.com/ossf/malicious-packages) ([source](https://github.com/ossf/malicious-packages/blob/9fbb5fba02ba2f02395d3d2d43c31b2c482b7a9d/osv/malicious/rubygems/wandhr11/MAL-2026-9220.json))
---
_-= Per source details. Do not edit below this line.=-_
## Source: ghsa-malware (d4567f39ab5b6f6985f1a7421132ca722f133759b222dfc9a12fc717721f11de)
---
Credit: [OpenSSF](https://github.com/ossf/malicious-packages) ([source](https://github.com/ossf/malicious-packages/blob/9fbb5fba02ba2f02395d3d2d43c31b2c482b7a9d/osv/malicious/rubygems/wandhgx/MAL-2026-9216.json))
---
_-= Per source details. Do not edit below this line.=-_
## Source: ghsa-malware (fe2c576f2178d113e33ef28563bcee444ae6ff985913fcaff9eb7b0a350d29da)
---
Credit: [OpenSSF](https://github.com/ossf/malicious-packages) ([source](https://github.com/ossf/malicious-packages/blob/9fbb5fba02ba2f02395d3d2d43c31b2c482b7a9d/osv/malicious/rubygems/wandhr0/MAL-2026-9217.json))
---
_-= Per source details. Do not edit below this line.=-_
## Source: ghsa-malware (17076822992d0db2ab48bd7d11f9771060054b9b2af3275464fd7a94e98fdcd7)
---
Credit: [OpenSSF](https://github.com/ossf/malicious-packages) ([source](https://github.com/ossf/malicious-packages/blob/9fbb5fba02ba2f02395d3d2d43c31b2c482b7a9d/osv/malicious/rubygems/wandhr1/MAL-2026-9218.json))
---
_-= Per source details. Do not edit below this line.=-_
## Source: ghsa-malware (1d60cae0fbbdeec07ff8f206957a6a94544d2385f40a56b8cce6cd681166f58d)
---
Credit: [OpenSSF](https://github.com/ossf/malicious-packages) ([source](https://github.com/ossf/malicious-packages/blob/9fbb5fba02ba2f02395d3d2d43c31b2c482b7a9d/osv/malicious/rubygems/wandhgroot/MAL-2026-9215.json))
---
_-= Per source details. Do not edit below this line.=-_
## Source: ghsa-malware (506a85c3528c7b56e65ac9bccdcaa7142837592d350e458f821aaf5f7cc63a50)
---
Credit: [OpenSSF](https://github.com/ossf/malicious-packages) ([source](https://github.com/ossf/malicious-packages/blob/9fbb5fba02ba2f02395d3d2d43c31b2c482b7a9d/osv/malicious/rubygems/wandhgpath/MAL-2026-9214.json))
The RubyGems package 'wandhgenc' version 0.0.1 has been identified as containing malicious code. This is a supply chain threat where the package itself is malicious. There is no CVSS score or detailed technical exploit information available. No patch or remediation has been indicated. No known exploits in the wild have been reported.
The RubyGems package 'wandhgag' version 0.0.1 contains malicious code. This package is identified as a malicious package by the OpenSSF and is listed in the malicious packages database. There is no CVSS score or detailed technical vulnerability description available. No known exploits in the wild have been reported. No patch or remediation information is provided.
The RubyGems package 'wandhgcal' version 0.0.1 is identified as containing malicious code. This package is flagged as a malicious package by the OpenSSF project and is listed in the malicious packages database. There is no CVSS score or detailed technical vulnerability description available. No known exploits in the wild have been reported.
The wandgitx RubyGem version 0.0.1 is identified as containing malicious code. This package is flagged as a malicious package in the RubyGems ecosystem. There is no CVSS score or detailed technical exploit information available. No known exploits in the wild have been reported. No patch or remediation guidance is provided.
The RubyGems package 'wandhcalz' version 0.0.1 contains malicious code as identified by the OpenSSF malicious packages project. This package is flagged as a malicious package in the RubyGems ecosystem. No CVSS score or detailed technical exploit information is provided.
The RubyGems package 'wandfosurl' version 0.0.1 contains malicious code as identified by the OpenSSF and reported in the GCVE database. This package is recognized as a malicious package rather than a traditional vulnerability with a patch. No CVSS score is assigned to this threat.