The RubyGem 'control-character-command-injection' version 1.0.1 contains malicious code executed during installation. This code collects sensitive host information including hostname, username, current working directory, home directory, and contents of system files such as /etc/resolv.conf, /etc/passwd, and /etc/hosts. It then sends this data via a TLS connection to an external, unauthorized server. This exfiltration occurs automatically without user interaction.