Malicious code in hesk (crates.io)

Source: amazon-inspector 83716a1c499cecbd64fe45f5ff56ab70ea6d1543e922c55e0514f2e2a69fe391 The crate ships two reachable async payloads — pub async fn dat in src/test.rs and pub async fn bs in src/parse.rs, both imported from src/lib.rs — that walk the user's home directory with walkdir, build a z...