Description
`jfrog_quotes` was part of a campaign that attempted to exfiltrate
environmental data from the host.
The malicious crate had 1 version published in January 2025, and had no
evidence of actual usage. This crate had no dependencies on crates.io.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| crates.io | jfrog_quotes | >= 0.0.0-0 | — | RUSTSEC-2025-0158 |