The QubitSDK RubyGems package contains malicious code in multiple specific versions. This is a supply chain threat where the package itself is compromised to include harmful functionality. The affected versions are explicitly identified, but no CVSS score or detailed technical exploit information is provided.