crates.io: Malicious crates faster_log and async_println

· The Rust Programming Language · Sept. 24, 2025, 5:32 p.m.
Summary
This blog post details the discovery of two malicious crates on crates.io that were designed to search for and exfiltrate sensitive keys, such as Ethereum and Solana private keys. The malicious crates, `faster_log` and `async_println`, imitated legitimate crates through a method known as typosquatting. Upon notification, the crates were promptly removed, and the team has retained logs for future analysis to prevent similar attacks.