Malicious versions reported for this package
- MAL-2026-14337 — 0.8.7 · Aug 20, 2026
3 results · Feed
-
Unscored —
`internment` 0.8.7 was removed from crates.io due to a malicious dependency
A new version of the `internment` crate was published with a direct dependency on `proc-macro1`, which would execute a malicious build script. The compromised version of this crate was published on 2026-08-20, and was removed approximately 90 minutes later. T…
-
Critical 9.8
Data race in internment
An issue was discovered in the internment crate before 0.4.2 for Rust. There is a data race that can cause memory corruption because of the unconditional implementation of Sync for Intern<T>.
-
High 8.1
Use after free in internment
An issue was discovered in the internment crate through 2020-05-28 for Rust. ArcIntern::drop has a race condition and resultant use-after-free.