VDB
Sign up
CRITICAL

GHSA-3mmg-7c2q-8938

`sha-rust` was removed from crates.io for malicious code

Details

It appeared to be attempting to steal credentials from local files.

Are you affected?

Enter the version of the package you're using.

Affected packages

crates.io/sha-rust
Introduced in: 0

No fixed version published yet for sha-rust. Pin to a known-safe version or switch to an alternative.

References