Skip to content
OpenAdvisories
Unscored RUSTSEC-2025-0159

`sophosfirewall-python` was removed from crates.io for malicious code

Published Feb 15, 2025 · Updated Mar 30, 2026 · Assigned by RUSTSEC

Description

`sophosfirewall-python` was part of a campaign that attempted to exfiltrate
environmental data from the host.

The malicious crate had 6 versions published in February 2025, and had no
evidence of actual usage. This crate had no dependencies on crates.io.

Affected packages

EcosystemPackageAffectedFixedRecord
crates.io sophosfirewall-python >= 0.0.0-0 — RUSTSEC-2025-0159

References