—
RUSTSEC-2025-0157
`statsrelay-protobuf` was removed from crates.io for malicious code
Details
`statsrelay-protobuf` was part of a campaign that attempted to exfiltrate environmental data from the host.
The malicious crate had 1 version published in August 2025, and had no evidence of actual usage. This crate had no dependencies on crates.io.
Are you affected?
Enter the version of the package you're using.
Affected packages
crates.io/statsrelay-protobuf
Introduced in:
0.0.0-0No fixed version published yet for statsrelay-protobuf. Pin to a known-safe version or switch to an alternative.