1 result · Feed
-
Unscored —
`chrono_anchor` was removed from crates.io due to malicious code
The `chrono_anchor` crate attempted to exfiltrate `.env` files to a server that was in turn impersonating the legitimate `timeapi.io` service. The malicious crate had 1 version published on 2026-03-04 approximately 6 days before removal and had no evidence of…