The RubyGems package 'hgpathr4' version 0.0.1 contains malicious code as identified by the OpenSSF project. This package is classified as a malicious package rather than a traditional vulnerability with a CVSS score. There is no known exploit in the wild and no patch or remediation information is provided.