crates.io: Malicious crates evm-units and uniswap-utils

33 · The Rust Programming Language · Dec. 3, 2025, 10:01 p.m.
Security cryptocurrency Rust Programming malware
Summary
On December 2nd, the crates.io team acted quickly to remove two malicious crates, 'evm-units' and 'uniswap-utils', that attempted to steal cryptocurrency. Reported by Socket Threat Research, these crates had published multiple versions and garnered thousands of downloads before their deletion. Thankfully, no downstream crates depended on them. The incident highlights important security risks in the Rust ecosystem.
Read full post on blog.rust-lang.org →
AUTHOR
BLOG POST FEATURED ON

Placeholder image
Hacker News

3 points

Placeholder image
r/rustlanges

1 points

Add this plugin to your blog