The RubyGems package 'galvinhsiu-active-cart' version 0.0.20 contains malicious code. This package is identified as a malicious package by the OpenSSF and is listed in the malicious packages database. No specific technical details about the nature of the malicious code or its impact are provided.