The RubyGems package 'aliyun-ruby_api' version 0.0.3 contains malicious code as identified by the OpenSSF malicious packages database. This package is flagged as a malicious package but no further technical details or exploitation methods are provided. There is no CVSS score assigned to this threat.