The irs_data RubyGem versions 9.9.9, 9.9.99, 9.9.999, 9.9.9999, 9.9.99999, 9.9.999991, and 9.9.9999911 contain malicious code. This is identified as a malicious package rather than a traditional vulnerability. There is no CVSS score or detailed technical exploitation information available.