Skip to content
OpenAdvisories
Unscored RUSTSEC-2026-0101

`safe-agent-rs` was removed from crates.io for being affiliated with malicious code

Published Apr 13, 2026 · Updated Apr 15, 2026 · Assigned by RUSTSEC

Description

While `safe-agent-rs` did not directly contain malicious code, it was owned by the same user as
`pretty-changelog-logger` and `microsoftsystem64`. `safe-agent-rs` also appeared to be imitating a
different websocket library. We decided to remove it out of an abundance of caution.

This crate had 2 versions published on 2026-03-24 that had a total of 4138 downloads. There were no crates depending on this crate on crates.io.

Affected packages

EcosystemPackageAffectedFixedRecord
crates.io safe-agent-rs >= 0.0.0-0 — RUSTSEC-2026-0101

References