Crates.io Removes Malicious Rust Package Targeting Web3 Developers

Published: (December 5, 2025 at 10:45 AM EST)
1 min read
Source: DevOps.com

Source: DevOps.com

Malicious Rust Package Removed from crates.io

A malicious Rust package that was found to be downloading payloads aimed at stealing cryptocurrency was removed from the crates.io Rust package registry, along with another package by the same author that appeared benign but was dependent on the first. The crates.io team removed both packages this w…

Back to Blog

Related posts

Read more »