Skip to content
OpenAdvisories
Unscored RUSTSEC-2023-0105

`windowsservice` was removed from crates.io for malicious code

Published Nov 18, 2023 · Updated Mar 26, 2026 · Assigned by RUSTSEC

Description

This crate was part of a typosquatting malware cluster published by the user
`TerryDavisSoldier` to run an arbitrary malware payload on Windows hosts.

This advisory is to retrospectively document this attempted attack. The version
information and download records of the malicious crate are no longer
available. The related malicious crates have been yanked, and the malicious
account has been banned.

Affected packages

EcosystemPackageAffectedFixedRecord
crates.io windowsservice >= 0.0.0-0 — RUSTSEC-2023-0105

References