Skip to content
OpenAdvisories

Package · crates.io

mysten-metrics

1 known vulnerabilities.

Malicious versions reported for this package

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical —
    GHSA-g38r-8gmr-ghrf

    `mysten-metrics` was removed from crates.io for malicious code

    `mysten-metrics` included a build script that attempted to exfiltrate data from the build machine. The malicious crate had 1 version published on 2026-04-20 and had no evidence of actual usage. This crate had no dependencies on crates.io.

    mysten-metrics crates.io