PT-2025-54756 · Crates.Io · Finch Cli Rust

Publicado 2025-12-09 · Atualizado 2025-12-09

OSV

This attempts to typosquat the existing crate [finch cli](https://crates.io/crates/finch cli) to steal credentials from local files.

The malicious crate had 1 version published on 2025-12-08 and had been downloaded 18 times. There were no crates depending on this crate on crates.io.

Thanks to Matthias Zepper of NGI Sweden for reporting this to the crates.io team!

Identificadores relacionados

RUSTSEC-2025-0152

Produtos afetados

Finch Cli Rust

Referências · 3

• https://rustsec.org/advisories/RUSTSEC-2025-0152.html · Nota
• https://crates.io/crates/finch_cli_rust · Nota
• https://osv.dev/vulnerability/RUSTSEC-2025-0152 · Aviso do Fabricante