VDB
KO

RUSTSEC-2026-0259

`arone` was removed from crates.io due to malicious code

Details

We identified `arone` contained malicious code executed through a build script.

This crate had 7 versions, and the last was published at 2026-08-18 with no evidence of actual usage. The crate was removed from crates.io and the user account was locked.

Are you affected?

Enter the version of the package you're using.

Affected packages

crates.io / arone
Introduced in: 0.0.0-0

No fixed version published yet for arone. Pin to a known-safe version or switch to an alternative.

References