The RubyGems package 'aqueduct-client' version 1.3.3 has been identified as malicious by the OpenSSF Package Analysis project. This package executes one or more commands associated with malicious behavior, posing a security risk to users who install or use it. No official patch or remediation guidance is currently provided.