Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Crates.io Removes Malicious Code from `logprinter` Package
published 6 months ago
Summary
The `logprinter` package on crates.io was found to contain code that downloaded and executed external content, potentially allowing an attacker to inject malicious code. This has been removed, but users should be cautious when installing packages from crates.io and ensure they follow best practices for dependency management.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| crates.io | – | logprinter | >= 0.0.0-0 |
Original advisory text
`logprinter` was removed from crates.io for malicious code
The crate downloaded code from an external HTTP endpoint and executed it within its `trace()` fn.
Timeline
Published9 Apr 2026
Updated9 Apr 2026
First seen9 Apr 2026
Sources
RUSTSEC-2026-0084 · OSV
Track software like this
Free during beta