PT-2026-34698 · Crates.Io · Pretty-Changelog-Logger

Publicado 2026-04-13 · Atualizado 2026-04-13

OSV

pretty-changelog-logger contains a build script (build.rs) that acts as a loader/dropper for malicious payloads.

The malicious crate had 3 versions published on 2026-04-08 that had a total of 2239 downloads. There were no crates depending on this crate on crates.io.

Thanks to Socket.dev for detecting and reporting this to the crates.io team!

Identificadores relacionados

RUSTSEC-2026-0100

Produtos afetados

Pretty-Changelog-Logger

Referências · 3

• https://crates.io/crates/pretty-changelog-logger · Nota
• https://osv.dev/vulnerability/RUSTSEC-2026-0100 · Aviso do Fabricante
• https://rustsec.org/advisories/RUSTSEC-2026-0100.html · Nota