—
RUSTSEC-2026-0266
`internment` 0.8.7 was removed from crates.io due to a malicious dependency
Details
A new version of the `internment` crate was published with a direct dependency on `proc-macro1`, which would execute a malicious build script.
This compromised version was published on 2026-08-20 and removed approximately 90 minutes later, with no evidence of actual usage.
Are you affected?
Enter the version of the package you're using.
Affected packages
crates.io / internment
Introduced in:
0.8.7-0 No fixed version published yet for internment. Pin to a known-safe version or switch to an alternative.