The RubyGems package 'asset-uploader' version 0.0.3 contains malicious code as identified by the OpenSSF malicious packages project. This is a supply chain threat involving a compromised or intentionally harmful package published to the RubyGems ecosystem.