Skip to content
OpenAdvisories

Package · crates.io

sha-rst

1 known vulnerabilities.

1 result · Feed

  • Critical —

    `sha-rst` was removed from crates.io for malicious code

    This crate was used as a dependency by `finch_cli_rust` and `finch-rst` and contained a malware payload to exfiltrate credentials. The malicious crate had 1 version published on 2025-12-08 and had been downloaded 22 times. Other than the other crates above th…