A malicious RubyGem, agentic-call-control, has been discovered to exfiltrate sensitive system information without user consent during installation. The gem's native extension script collects and sends host identifiers, directory paths, and system file contents to a hardcoded server over a TLS connection. This activity is not related to the gem's intended purpose and serves as a reconnaissance attack. The affected gem may be used to gather sensitive information from systems where it is installed.