Malicious code in lwd_uri_util (crates.io)

Source: amazon-inspector e81c03febf0e971e3e3442e9e9d7987d297c951f84990ea3bfa68edc8e05e544 The crate is advertised as a URI canonicalization utility, and lib.rs is pure string manipulation with no network I/O. However, build.rs executes on every cargo build/check/IDE load and performs installer-si...