The RubyGems package 'deriving-license' version 0.3.1 contains malicious code. This package is identified as a malicious package by the OpenSSF project and is listed in the GHSA and OSV databases. No specific technical details about the nature of the malicious code or its impact are provided. There is no known exploit in the wild reported at this time.