RUSTSEC-2026-0014 `rpc-check` was removed from crates.io for malicious code

It was attempting to steal credentials from the POLYMARKETPRIVATEKEY environment variable. The malicious crate had 3 versions published on 2026-02-15 and had been downloaded only 155 times. There were no crates depending on this crate on crates.io. Thanks to Sisong Li for finding and reporting th...

CVE-2026-20628

creationtimestamp| type| source ---|---|--- 2026-02-15 04:56:02+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3meuqnsutes2w...

CVE-2025-3015

creationtimestamp| type| source ---|---|--- 2025-03-31 21:31:30+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/9766 2026-02-15 10:50:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116074257599879470...