The RubyGems package 'aliyun_sdk-core' version 0.1.5 contains malicious code as identified by the OpenSSF malicious packages project. This is a supply chain threat involving a compromised or intentionally harmful package distributed via RubyGems. No CVSS score is available for this threat.