The RubyGems package 'shopify-cli-dependencies' version 9.9.15 contains malicious code as identified by the OpenSSF malicious packages database. This package is flagged as a malicious package rather than a traditional vulnerability. There is no CVSS score or detailed technical exploit information available. No known exploits in the wild have been reported. No patch or remediation information is provided.