GHSA-3MMG-7C2Q-8938 `sha-rust` was removed from crates.io for malicious code

It appeared to be attempting to steal credentials from local files...