231 matches found
`finch-rst` was removed from crates.io for malicious code
This attempts to typosquat the existing crate finch to steal credentials from local files. The malicious crate had 1 version published on 2025-12-08 and had been downloaded 21 times. There were no crates depending on this crate on crates.io. Thanks to Matthias Zepper of NGI Sweden for reporting...
RUSTSEC-2025-0151 `sha-rst` was removed from crates.io for malicious code
This crate was used as a dependency by finchclirust and finch-rst and contained a malware payload to exfiltrate credentials. The malicious crate had 1 version published on 2025-12-08 and had been downloaded 22 times. Other than the other crates above that were part of the attack, no other crates...
PT-2025-54756
This attempts to typosquat the existing crate finch cli to steal credentials from local files. The malicious crate had 1 version published on 2025-12-08 and had been downloaded 18 times. There were no crates depending on this crate on crates.io. Thanks to Matthias Zepper of NGI Sweden for reporti...
PT-2025-54754
This attempts to typosquat the existing crate finch to steal credentials from local files. The malicious crate had 1 version published on 2025-12-08 and had been downloaded 21 times. There were no crates depending on this crate on crates.io. Thanks to Matthias Zepper of NGI Sweden for reporting...
PT-2025-54755
This crate was used as a dependency by finch cli rust and finch-rst and contained a malware payload to exfiltrate credentials. The malicious crate had 1 version published on 2025-12-08 and had been downloaded 22 times. Other than the other crates above that were part of the attack, no other crate...
`finch-rust` was removed from crates.io for malicious code
It depended on the sha-rust crate, which appeared to be attempting to steal credentials from local files...
RUSTSEC-2025-0148 `finch-rust` was removed from crates.io for malicious code
It depended on the sha-rust crate, which appeared to be attempting to steal credentials from local files...
EUVD-2025-75982
Malicious code in preferredfinch-tool npm...
EUVD-2025-81177
Malicious code in monthlyfinch0xrequest npm...
EUVD-2025-62721
Malicious code in parallelfinchz3n npm...
EUVD-2025-73163
Malicious code in unfairfinchz3n npm...
EUVD-2025-86677
Malicious code in continentalfinchz3n npm...
EUVD-2025-51121
Malicious code in weary-white-finch npm...
Malicious code in curved-rose-finch (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd4733f035a76f3a72778f0c4e738aff55017ba75200e0fd98d684ab72d0fb9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in decent-chocolate-finch (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c0fec97b6603182d5bb6b2ed5d0094bb25bbf636b4fd166eb45751ac8aed98a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in rainy-gold-finch (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ba2e47d83deb028c2eb11eb6f0d0b7b0ca70077c3ea41ef8796af08c1857be8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-51753
Malicious code in structural-maroon-finch npm...
EUVD-2025-53047
Malicious code in net-amaranth-finch npm...