PT-2026-37358 · Crates.Io · Mysten-Metrics
Published
2026-05-04
·
Updated
2026-05-04
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
mysten-metrics included a build script that attempted to exfiltrate data from the build machine.The malicious crate had 1 version published on 2026-04-20 and had no evidence of actual usage. This crate had no dependencies on crates.io.
RCE
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Mysten-Metrics