Malicious versions reported for this package
- MAL-2026-18776 — 0.2.0, 0.3.0 · Nov 7, 2026
1 result · Feed
-
Unscored —
`env-test-guard` was removed from crates.io for malicious code
`env-test-guard` attempted to exfiltrate credentials from the environment to an arbitrary URL. The malicious crate had 2 versions published on 2026-03-24 and 2026-03-25, approximately 8 months before removal, and had no evidence of actual usage. This crate ha…