The RubyGems package 'shopify-cli-extensions' version 9.9.15 contains malicious code as identified by the OpenSSF malicious packages database. This is a supply chain threat involving a compromised or intentionally harmful package distributed via RubyGems.