The brida-frida-hooks RubyGem version 1.0.1 contains malicious code that executes automatically during installation. This code collects sensitive system information including user identity, directory paths, hostname, and contents of critical system files, then exfiltrates this data over an encrypted connection to a hardcoded external server. This behavior is unrelated to the gem's stated purpose and occurs without user consent.