Malicious code in lwd_uri_util (crates.io)

Source: amazon-inspector e81c03febf0e971e3e3442e9e9d7987d297c951f84990ea3bfa68edc8e05e544 The crate is advertised as a URI canonicalization utility, and lib.rs is pure string manipulation with no network I/O. However, build.rs executes on every cargo build/check/IDE load and performs installer-si...

MAL-2026-19058 Malicious code in lwd_uri_util (crates.io)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 912a23b9591c44a2e3f0e45acc7ec6a62051873048dbc8590ff331a11d205614 The crate's build.rs runs on every cargo build/check/test and under rust-analyzer and performs installer-side credential theft unrelated to the crate...