The RubyGems package aliyun-sls_sdk version 0.0.9 contains malicious code as identified by the OpenSSF malicious packages database. This is a supply chain threat where the package itself is compromised to potentially perform unauthorized or harmful actions when used.