VDB
Sign up
CRITICAL

GHSA-f8h5-x737-x4xr

`finch-rust` was removed from crates.io for malicious code

Details

It depended on the `sha-rust` crate, which appeared to be attempting to steal credentials from local files.

Are you affected?

Enter the version of the package you're using.

Affected packages

crates.io/finch-rust
Introduced in: 0

No fixed version published yet for finch-rust. Pin to a known-safe version or switch to an alternative.

References