The RubyGem package 'vagrant_hvinfo' version 0.1.3 contains malicious code as identified by the OpenSSF malicious packages project. This package is flagged as a malicious package rather than a traditional vulnerability. There is no CVSS score or detailed technical exploit information available. No patch or remediation guidance is currently provided by the vendor or authoritative sources.