Skip to content
OpenAdvisories

Package · crates.io

rpc-check

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Unscored —
    RUSTSEC-2026-0018

    `rpc-check` was removed from crates.io for malicious code

    This is part of an ongoing campaign to attempt to typosquat crates in the [`polymarket-client-sdk`](https://crates.io/crates/polymarket-client-sdk) ecosystem to exfiltrate user credentials. The malicious crate had 6 versions published from 2026-02-20 onwards …

    rpc-check crates.io
  • Unscored —
    RUSTSEC-2026-0014

    `rpc-check` was removed from crates.io for malicious code

    It was attempting to steal credentials from the `POLYMARKET_PRIVATE_KEY` environment variable. The malicious crate had 3 versions published on 2026-02-15 and had been downloaded only 155 times. There were no crates depending on this crate on crates.io. Thanks…

    rpc-check crates.io