A RubyGem named dynamic-object-handler has been identified as containing malicious code. The gem, when installed, automatically executes a script that collects sensitive information from the system, including the current working directory, home directory, hostname, login name, and contents of certain system files. This information is then transmitted to a hardcoded Burp Collaborator subdomain, indicating unauthorized code execution on the system. The discovery highlights the importance of scrutinizing dependencies and verifying their integrity to prevent potential security breaches.