—
RUSTSEC-2025-0159
`sophosfirewall-python` was removed from crates.io for malicious code
Details
`sophosfirewall-python` was part of a campaign that attempted to exfiltrate environmental data from the host.
The malicious crate had 6 versions published in February 2025, and had no evidence of actual usage. This crate had no dependencies on crates.io.
Are you affected?
Enter the version of the package you're using.
Affected packages
crates.io/sophosfirewall-python
Introduced in:
0.0.0-0No fixed version published yet for sophosfirewall-python. Pin to a known-safe version or switch to an alternative.