PT-2025-54751 · Crates.Io · Finch-Rust

Publicado 2025-12-05 · Atualizado 2025-12-05

OSV

It depended on the sha-rust crate, which appeared to be attempting to steal credentials from local files.

Identificadores relacionados

RUSTSEC-2025-0148

Produtos afetados

Finch-Rust

Referências · 5

• https://crates.io/crates/finch-rust · Nota
• https://rustsec.org/advisories/RUSTSEC-2025-0148.html · Nota
• https://osv.dev/vulnerability/RUSTSEC-2025-0148 · Aviso do Fabricante
• https://socket.dev/blog/malicious-crate-mimicking-finch-exfiltrates-credentials · Nota
• https://blog.rust-lang.org/2025/12/05/crates.io-malicious-crates-finch-rust-and-sha-rust · Nota