Description
`custom-req-on-workers` was part of a campaign that attempted to exfiltrate
environmental data from the host.
The malicious crate had 1 version published in January 2025, and had no
evidence of actual usage. This crate had no dependencies on crates.io.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| crates.io | custom-req-on-workers | >= 0.0.0-0 | — | RUSTSEC-2025-0160 |