diff --git a/crates/logprinter/RUSTSEC-0000-0000.md b/crates/logprinter/RUSTSEC-0000-0000.md new file mode 100644 index 000000000..0d13337d8 --- /dev/null +++ b/crates/logprinter/RUSTSEC-0000-0000.md @@ -0,0 +1,15 @@ +```toml +[advisory] +id = "RUSTSEC-0000-0000" +package = "logprinter" +date = "2026-04-09" +expect-deleted = true +references = ["https://socket.dev/supply-chain-attacks/north-korea-s-contagious-interview-campaign"] + +[versions] +patched = [] +``` + +# `logprinter` was removed from crates.io for malicious code + +The crate downloaded code from an external HTTP endpoint and executed it within its `trace()` fn.