PT-2025-54749 · Crates.Io · Sha-Rust

Publicado 2025-12-05 · Atualizado 2025-12-05

OSV

It appeared to be attempting to steal credentials from local files.

Identificadores relacionados

RUSTSEC-2025-0146

Produtos afetados

Sha-Rust

Referências · 5

• https://rustsec.org/advisories/RUSTSEC-2025-0146.html · Nota
• https://socket.dev/blog/malicious-crate-mimicking-finch-exfiltrates-credentials · Nota
• https://blog.rust-lang.org/2025/12/05/crates.io-malicious-crates-finch-rust-and-sha-rust · Nota
• https://osv.dev/vulnerability/RUSTSEC-2025-0146 · Aviso do Fabricante
• https://crates.io/crates/sha-rust · Nota