The RubyGems package catarse-paypal_express version 3.0.2 contains malicious code as identified by the OpenSSF malicious packages database. This is a supply chain threat involving a compromised or intentionally harmful package distributed via RubyGems.