Skip to content
OpenAdvisories
Unscored RUSTSEC-2026-0081

`logtrace` was removed from crates.io for malicious code

Published Apr 5, 2026 · Updated Apr 6, 2026 · Assigned by RUSTSEC

Description

`logtrace` appeared to be downloading a RAT.

The malicious crate had 2 versions published on 2026-04-01 that had a total of 30 downloads. There
were no crates depending on this crate on crates.io.

Thanks to [Socket.dev](https://socket.dev/) for detecting and reporting this to the crates.io team!

Affected packages

EcosystemPackageAffectedFixedRecord
crates.io logtrace >= 0.0.0-0 — RUSTSEC-2026-0081

References