Skip to content
OpenAdvisories

Package · crates.io

time-sync

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical —
    GHSA-mh23-rw7f-v5pq

    `time-sync` was removed from crates.io due to malicious code

    The `time-sync` crate attempted to exfiltrate `.env` files to a server that was in turn impersonating the legitimate `timeapi.io` service. This the same attack that we've seen three times in the last few days. The malicious crate had 1 version published on 20…

    time-sync crates.io