From dd8a9f75113642ab42207bda9fb14cd3829cd5fa Mon Sep 17 00:00:00 2001
From: Tobias Bieniek <tobias@bieniek.cloud>
Date: Thu, 9 Apr 2026 13:22:23 +0200
Subject: [PATCH] Add advisory for the malicious `logprinter` crate (#2772)

see https://rust-lang.zulipchat.com/#narrow/channel/318791-t-crates-io/topic/Malicious.20crate.3A.20.27logprinter.27/with/584423378
---
 crates/logprinter/RUSTSEC-0000-0000.md | 15 +++++++++++++++
 1 file changed, 15 insertions(+)
 create mode 100644 crates/logprinter/RUSTSEC-0000-0000.md

diff --git a/crates/logprinter/RUSTSEC-0000-0000.md b/crates/logprinter/RUSTSEC-0000-0000.md
new file mode 100644
index 000000000..0d13337d8
--- /dev/null
+++ b/crates/logprinter/RUSTSEC-0000-0000.md
@@ -0,0 +1,15 @@
+```toml
+[advisory]
+id = "RUSTSEC-0000-0000"
+package = "logprinter"
+date = "2026-04-09"
+expect-deleted = true
+references = ["https://socket.dev/supply-chain-attacks/north-korea-s-contagious-interview-campaign"]
+
+[versions]
+patched = []
+```
+
+# `logprinter` was removed from crates.io for malicious code
+
+The crate downloaded code from an external HTTP endpoint and executed it within its `trace()` fn.