The RubyGems package 'sprox-c160-1bzr' version 0.0.1 contains malicious code as identified by the OpenSSF project. This is a case of a malicious package being published in the RubyGems ecosystem. No specific technical details about the nature of the malicious code or its impact are provided.