Vulnerability RUSTSEC-2026-0469
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
1 day ago
November 09, 2026 at 12:00 PM UTC
`env-test-guard` was removed from crates.io for malicious code
>=0.0.0-0
>=0.0.0-0
Summary
`env-test-guard` was removed from crates.io for malicious code
Details
env-test-guard attempted to exfiltrate credentials from the environment to an arbitrary URL.
The malicious crate had 2 versions published on 2026-03-24 and 2026-03-25, approximately 8 months before removal, and had no evidence of actual usage. This crate had no dependencies on crates.io.
Thanks to Bitbison for the report.
References
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Impacted packages
Timeline
Published
1 day ago
November 09, 2026 at 12:00 PM UTC
Last Modified
15 hours ago
November 10, 2026 at 01:00 PM UTC