`sha-rust` was removed from crates.io for malicious code

It appeared to be attempting to steal credentials from local files...