Vulnerability RUSTSEC-2026-0465
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
1 day ago
November 09, 2026 at 12:00 PM UTC
`electrumd` was removed from crates.io for malicious code
>=0.0.0-0
>=0.0.0-0
Summary
`electrumd` was removed from crates.io for malicious code
Details
electrumd attempted to send telemetry from the build environment to an arbitrary URL.
The malicious crate had 5 versions published on 2026-01-26, approximately 10 months before removal, and had no evidence of actual usage. This crate had no dependencies on crates.io.
Thanks to Bitbison for the report.
References
Impacted packages
Timeline
Published
1 day ago
November 09, 2026 at 12:00 PM UTC
Last Modified
15 hours ago
November 10, 2026 at 01:00 PM UTC