Malware4 min read
Five Malicious Rust Crates Posed as Time Utilities to Steal .env Files
Researchers discovered five packages on crates.io masquerading as time utilities while exfiltrating developer credentials and API keys to attacker infrastructure.
James RiveraMar 11, 2026