mirror of
https://github.com/rustsec/advisory-db.git
synced 2026-07-16 00:12:29 -04:00
Add advisory for the malicious logprinter crate (#2772)
see https://rust-lang.zulipchat.com/#narrow/channel/318791-t-crates-io/topic/Malicious.20crate.3A.20.27logprinter.27/with/584423378
This commit is contained in:
15
crates/logprinter/RUSTSEC-0000-0000.md
Normal file
15
crates/logprinter/RUSTSEC-0000-0000.md
Normal file
@@ -0,0 +1,15 @@
|
||||
```toml
|
||||
[advisory]
|
||||
id = "RUSTSEC-0000-0000"
|
||||
package = "logprinter"
|
||||
date = "2026-04-09"
|
||||
expect-deleted = true
|
||||
references = ["https://socket.dev/supply-chain-attacks/north-korea-s-contagious-interview-campaign"]
|
||||
|
||||
[versions]
|
||||
patched = []
|
||||
```
|
||||
|
||||
# `logprinter` was removed from crates.io for malicious code
|
||||
|
||||
The crate downloaded code from an external HTTP endpoint and executed it within its `trace()` fn.
|
||||
Reference in New Issue
Block a user