crates.io: Malicious crates evm-units and uniswap-utils

· The Rust Programming Language · Dec. 3, 2025, 10:01 p.m.
Security cryptocurrency Rust Programming malware
Summary
On December 2nd, the crates.io team acted quickly to remove two malicious crates, 'evm-units' and 'uniswap-utils', that attempted to steal cryptocurrency. Reported by Socket Threat Research, these crates had published multiple versions and garnered thousands of downloads before their deletion. Thankfully, no downstream crates depended on them. The incident highlights important security risks in the Rust ecosystem.
Read full post on blog.rust-lang.org →
AUTHOR
Sponsored
Zulip logo Zulip
Organized team chat for people who take work seriously. Topic-based threading keeps conversations focused.
Try Zulip
Become a sponsor →
BLOG POST FEATURED ON

Placeholder image
Hacker News

3 points

Placeholder image
r/rustlanges

1 points

Add this plugin to your blog