VDB
Sign up
CRITICAL

GHSA-qprh-m6p3-hwxc

`sui-execution-cut` was removed from crates.io for malicious code

Details

`sui-execution-cut` included a build script that attempted to exfiltrate data from the build machine.

The malicious crate had 1 version published on 2026-04-20 and had no evidence of actual usage. This crate had no dependencies on crates.io.

Are you affected?

Enter the version of the package you're using.

Affected packages

crates.io/sui-execution-cut
Introduced in: 0

No fixed version published yet for sui-execution-cut. Pin to a known-safe version or switch to an alternative.

References