RUSTSEC-2026-0264 `proc-macro-en` was removed from crates.io due to malicious code

We identified that proc-macro-en contained the same build script as proc-macro1 and it was part of the same supply chain attack. This crate had one single version published at 2026-08-20. The crate was removed from crates.io and related user account was locked. This crate was used as part of a...

`proc-macro-en` was removed from crates.io due to malicious code

We identified that proc-macro-en contained the same build script as proc-macro1 and it was part of the same supply chain attack. This crate had one single version published at 2026-08-20. The crate was removed from crates.io and related user account was locked. This crate was used as part of a...

Malicious code in proc_macro_en (crates.io)

proc-macro-en is a malicious crate published to crates.io as part of the coordinated build-time payload campaign on 2026-08-20 that trojanized arrayref, internment, and append-only-vec and published the proc-macro1 typosquat of proc-macro2. It was used as an attacker-controlled dependency carryin...

proc-macro-error2 is unmaintained

The author of proc-macro-error2 has confirmed that the crate is no longer maintained and recommends that users migrate away from it. proc-macro-error2 was originally created as a maintained fork of proc-macro-error see RUSTSEC-2024-0370. Both the original crate and this fork are now unmaintained...

[SECURITY] Fedora 43 Update: rust-manyhow-0.11.4-1.fc43

Proc macro error handling =C3=A0 la anyhow x proc-macro-error...

[SECURITY] Fedora 43 Update: rust-proc-macro-utils-0.10.0-1.fc43

Low-level utilities on proc-macro and proc-macro2 types...

[SECURITY] Fedora 43 Update: rust-attribute-derive-macro-0.10.5-1.fc43

Clap for proc macro attributes...

[SECURITY] Fedora 42 Update: rust-proc-macro-utils-0.10.0-1.fc42

Low-level utilities on proc-macro and proc-macro2 types...

[SECURITY] Fedora 42 Update: rust-manyhow-0.11.4-1.fc42

Proc macro error handling =C3=A0 la anyhow x proc-macro-error...

[SECURITY] Fedora 41 Update: rust-proc-macro-utils-0.10.0-1.fc41

Low-level utilities on proc-macro and proc-macro2 types...

[SECURITY] Fedora 41 Update: rust-attribute-derive-macro-0.10.5-1.fc41

Clap for proc macro attributes...

[SECURITY] Fedora 41 Update: rust-manyhow-0.11.4-1.fc41

Proc macro error handling =C3=A0 la anyhow x proc-macro-error...

get-size-derive is unmaintained

get-size-derive's maintainer seems to be unreachable, with no commits and releases pushed for 1 year and no activity on the GitHub repo. get-size-derive also depends on attribute-derive ^0.6 a version of the crate which uses the yanked crate proc-macro-error. Possible Alternatives - get-size-deri...

proc-macro-error is unmaintained

proc-macro-error's maintainer seems to be unreachable, with no commits for 2 years, no releases pushed for 4 years, and no activity on the GitLab repo or response to email. proc-macro-error also depends on syn 1.x, which may be bringing duplicate dependencies into dependant build trees. Possible...

PT-2024-40920 · Syn +1 · Syn +1

Name of the Vulnerable Software and Affected Versions: proc-macro-error affected versions not specified Description: The maintainer of proc-macro-error appears to be unreachable, with no commits for 2 years, no releases for 4 years, and no activity on the GitLab repository or response to emails...