`littest` was removed from crates.io for malicious code

This crate was part of a typosquatting malware cluster published by the malicious user http-tiny and contained a malware payload in build.rs to exfiltrate host information to the attacker. This advisory is to retrospectively document this attempted attack. The version information and download...

Malicious code in littest (crates.io)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b7dbb9d0364d3e2b9efec40fc7a2ecdca02406774e6a4359423e6357cf9647e4 The OpenSSF Package Analysis project identified 'littest' @ 0.3.1 crates.io as malicious. It is considered malicious because: - The package...

MAL-2023-8429 Malicious code in littest (crates.io)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b7dbb9d0364d3e2b9efec40fc7a2ecdca02406774e6a4359423e6357cf9647e4 The OpenSSF Package Analysis project identified 'littest' @ 0.3.1 crates.io as malicious. It is considered malicious because: - The package...